last executing test programs: 8.198395848s ago: executing program 1 (id=3329): close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x801, 0x106) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(r0, 0x11c, 0x1, 0x0, 0x0) fanotify_init$auto(0x65, 0x2) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) setregid$auto(0x0, 0x3) clone$auto(0x2000000020003b46, 0x2, 0x0, 0x0, 0x2) wait4$auto(0x0, 0xfffffffffffffffc, 0x60000002, 0x0) setrlimit$auto(0x6, &(0x7f0000000040)={0xfffffffffffffffb, 0x2}) ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8) shmctl$auto_SHM_LOCK(0x5, 0xb, &(0x7f0000001400)={{0xca01, 0xee01, 0xffffffffffffffff, 0x0, 0xc, 0x8, 0x5}, 0x1000, 0x100, 0xb1, 0xfff, @raw=0xfd, @inferred=0xffffffffffffffff, 0x728c, 0x0, &(0x7f0000000100)="54c361a4963f46ec762cbd930936d43cc0", &(0x7f0000000400)="3a4e67c9a406af32838a19ccaa418a41d1d7201c907a3638a3f6e77198b589d729ca2a425a43ad987062dcbcb28e49e812e348e0b5910e3935261dece1f73c351af40099bd1940a0ceb04ffbe3c2e7c22e0f6b2daa0f5fa6958fe7835ace6b702b5d505883c65e3082d42f6ce4af7c53a6b403e537b9340310373ff3643ecbb9e41f1caf51db33ea9219299ecd97587ec2e917d206b793d1d4a2ffc91c4f7867e22fd0883ba709da7a1ce439035d3a498d7682c60db0ab76fec18d04e801350ce0f5dba9fb3594233b79f5c738d1ed759e554e8b1fe17ec266d7d922050d51c6aac9792f92c9d853a471e511490dda90f58c7913f9dd9764de24584deff2d8473f606fd5e2cd2bd312c90f9d7c5a5e72e512a96ddba26762bee88909a95a2c0fbe56e76fae29dfe8b200dc2dcc8f5f107aca495e1c423d83be821b89ac7d59c6b6c3c4a5456e177365eda4fe498f854b4cec5360b7453717b940a1d3f0098509c3bc39d0323c6f710e3ff2ae7e137353802a8448528f60bd3bf3950737648946877450e27e8e4a623500044949ea9a696b9a6785f16bcdc8dc8f0bbef34007fa81216b2fbc01721d1f66bffc1f4660aaf87e7cf40b116b3453b631a585c4e6210f7f7cc45d8c71938ebae3544f928087a098c918319ca370bcad6195e5ada300d1da6e936e6aaaf09bfa9187e42170cee8857a09a45a84823bdc31a5ce23554aafb455457b06ff089e55053973194ef6f3b44e65a81729212fc216372867c4ef000eb535849971321a1191f4da6f72bf5df0ab68ffdd46d67d8bff6d7dd6d3bc82033f47b0538fa03a41462cde6fdefe5cf50ab11c712caa7d9cc1e1be471dbf9ab3b6f7666777baa1d30d4b157a4b57e1e4d8ca4b69741367f6b08b6307ea9d1eab6cdf8cff28d02017b04896814c9b2acf5506738dc8808952ece5408520b45e6b34249e310b9c782c8aef80da02360aed4e163e1ba707ad07ea1aca8bb78b0749d7ffbb6941ee098222155402178dd61264b47e929081cacdad47921a4c64a7bc481af464873689e64c2e2d3d2c66e9e9ac754a013c7f929ac4aed75c8853feb80eb6b0ad35fe9f20163402086de2c1327a62f5267cfeca2b59ed3aa8252eecce5e4a9a3c3a649b25894e0916dd63444f9ad417035cd80af33497012c351c89d71f3e31d731eb47639c487a5867c849fc17382447b86dc5938f361fb6b71e5ecbcbed7e47443e748c393e3b1db902d24421919acdca35a32bdcb7a6418a09adc95387f42a51271344247d1ac2186467670a8921c983e7533ba15cc5f047035fef759a748b012d6d2d503674c5d16ca1b1ccec69d648c5dd1aff7af906e4c6f343be8153ae8cb6469fb5682d3dde38b68b91298f1c277de29e8a5a79de499e0126f5e342c8f5c582ce16f7322c84b7ff0e423985c22c64c595a43f6f3538ae8755196876bc1e5ce65196e3f5380681d17aad19c71ce188b4d0c69bf8e8297c613ef7d8ee67ba0ab8ad80a980bb30c6c7b5e78fe73eacf612fcbb6ffbad16af3eb3e2083fc2f3f7d39c7b18b872fb1da204e0c499b65a6dc879086b6ccfa2177d9e41923f235056c2cacd024f6eadaad2ad307304a86874008ac461a5000cba11877aa52b0b00e5463520b6261801e7f9593153653a01cfb213b1a254ee7f9a68a7aebaddb06abe28996880cca3eea4f869a0910ca1357ec92f0f0f7e91856b2057a93253e090ea98eb6615f5445dc6aacc0e09eac7c1f3adf72b197018dafde4236a1d29b7ec479592e621dbc679736e572d68700b497e176fb4567d52e1e2233332e16b915ea59050852519716c429bd66c58841ec4cc63d06c616eacc30ecaa9796883090bea0ad6e61a9d1076ff8fc6f2756a7ee885d866f412c4cc20d7830fcfdbf36e7536dd5e2be8ac2813ff98ea282d097b418692974a537541c6f9d6b0ba9172ceb4fa8ddead0a73d9b26449f80037b9bb211a821bb807ab759d997930f8cbb03f0c03998ad8ce7882645109ab5b91a987e40ad97bcc22e35c358abe1998632a962549324f5c2cfabbb7c8977fdfd202961d3051b8cf883783c14d6fc3561fd851e0a90b036d4b2c379457b042e944001d16331674a20c567f4d0b8ffe5302343ceed538d27445dc887d4264eead8ce7ac9e408337efac1223c9d862e3f2a2f47138b7ac67a5281c4ebf8394ef1f9bb7b4563bbf90ca7e2cfe375f865958bf0610d40b6c1938999f4de57a9a5bd20985aa87ed8995315ff9e6ae782684a9353e5f436a54ef5d273f48831fe5c549549e1fd23acc819e9a1ee5d69b55b1539fea28d727d8287a3f8b7cc2987383ca81ad545669ca5479a6f39d5513a240d0ef9e73c6dac702c538c3db3b644f61bfdf095d361e0054f9d47b8e31a204ecb39a539d7eb7a754948595de7ad78e9fdd31198503eec23bbac8fb9dd33467d9121ff652ece0fa1fba1ff6e52e93fba0375bc741c5e134d065134b39f1a5de2ae8145001035c68362bc82557674764c051b83c350ba0e9e974c8335b23e5e913a98a3c526ac7daebb8bb4f00c8c2420374fe4329f002e7bb7723baa1bae0da3e22737c489eef2625a5c0c289c4e22c94634386c80482039732a8b27a4ac99e0579fcc072f11d8070b60c25725a1dcf53ed1a4087de5bda0845db79212aa75318a7b4e6fcc5638a51a7b80b8a277171c10ad7bdaef43bf7448ae9ec4f8a8c41edec4d8bb83e6140b06e16b6699ce5da95b63b6e87f99f40bc158904e3b2bf741e3cb24e7e94137d2b3da6fc8f8eca8c2d1abd169523104ef2a709c65bd7508849304fffce7f91cc70462ea1ad011c2c6811cbda176c6efcb2266595937fa7c4f36be79bd3455f6c0d9edd95b08afb503abb919b340cdcd835590e245ae22660fc247c4e627e3ef045156e84ea24ba65c9e5ab205a82bc7faa74ef3f114e378599224d4f23d3fc055407a35b4ef86a22c4822391927bb563c832fc40109453e07f96977f759e3c5477dc0e312fbcafb74b9161a85fb275546f1cc830ef4bbc00c1f6e18c783f8ac38031622a39a4bf9773b45e683c3884f455d0d3b643eaaecac98010e792ba605430de2936d1c925e814f671f712a6c8f6711067fd65e1c36a84caf49bb2f24d8e9ee354d188029884bd73dbd221b960951bc55b8bd32ae37bdfcd04e6edbcfb39c931328688f34ad453cbdea356384ae545163acbf7c1a45dfd58af3fa1f23471c1eae941d1f8ce0883d37444d2f245b465e11a6cc7528fe704d40f2e1aebb3306cbaeeec9e3271c53e2d3d0152504179aa0d110b571e8b9477e8dcfd0d3b7cdb3ac96ad46da54ad7bdf4ea8f150507cc6a6753dd4df4d7940ad8d22494efe4ec8e915754a757f8143138d3cd8a168726c84010695415a6c260d6ceb313278c600c2b6cc9f8b18ec075bf390b7c7a26463aa4ec03e4197ffdb9e630a6072b5faa9a15935d7b2616422d0c07d9ec14bdf886d990a3819a672a6210b7e3e92f2639ad7e36da5783b117579e0a7c790dcc56d4795d76fc2f56b02c7159d8978543b23dd4d1e6b3449ca586b78ab3db28b43fc4b31e8110153437c0a05697e2b778fa545ccda367dc9c391338c637384032f1864aefcdf3906ced453622f3d8e56f71f20cdeaafa91dfbd02c2eaa4512b3aa5d8758149c3efbabaf68d2d0c81e31db1c0d8aebf0c744bf3a542c3f46a7c372f02a05efe5314693d42a490bdd57571146b48fd0368494511509b74063070c71a459db5b137cdb7f538ae86364cc906cc3c36c5fa8d0f7a6fa80cf62835cfa736d4fc6a7d18303727e3c20f5ddf78807a4ddeff3afc4f3b437fdd77c322bc8f27dc9655a3f1ce0696d9c58c7c78286835d4940abf603052b2bcc3b817965e84965575af25261483720d392a83bb04d14c8736a3961abbc6c9648bda96101c799982118b15d0610f6525979e1d6d3c7de51dede9ef4b36fe492e3298683eabadea0bbc5a33852b46200307d3792985ced1d5db1c77cf8c152960200844ac397b8b364d98b1d4de0dbf8b06a8d8614c6404d70bfb0a3d0ec30e85d5318344cbc962c8faa4a581b1d2484b558165e69fedf91aece12ff7211ded11b7e962b01b29d7f686b4c456f8304ae65fca8ef2e4a134d4338954e3a893f52375afd9878d43b1da4d411d1919a3f158840a0463b2abe2003fd0d8236208f41ccd522462e745ebe2a1bb4d2fd4e4461c51010cb207a81eb933eafdfaeae238cead931692ff4f3176e5fe5fd406f3b2888a77cb3e22bf90c2c23fa7d7b4d4f8324745a7fee14a0bf0733a88b09ab880b09432e2c26fc713af156e063be7a43d722c708a312b3403beae916b8ab3606059e516819865e45b684197b1b636429ebe0e844d87f6dca34b325118a6253c419bbaf8a0c9f0ebb86008344cf67083937616b98301168c28b7f58d0c1f724684aedc6d143abcc61dbf969e0b821deae581128cb9a61990734309b9d5bf630f622334abc248208c1be3d530ae5635b5320cd1041cb92d897aa9567d4d439e638983508131bca43e038a880c4e91640d48341c7874809be2ad825e3e23ed8ca04b99ac8b2799d4fbb133e0a4239674e635e29058327c7a21eebb6ee522cab2df1ae655e4dfe099cc8b673bdf8c6e4f769bbf7fb2ad9be659948c2d4057d80edcb7bb41a5241f7e5c98e9f0ae37d8ebde385d2858549e5197a4aa05b95fd4427e7e03fea9e8b39a600998c86df19bdc661c2411fcade01cfb3ad01767bdc53aa94fd7e9913f51584363d9efc96bd36defa0cc765109bd438a6ec9eb1d05ae05d6a82a153327bf7efbaa16a1e5d9431dbb74b64644abbfe8a7d1d919c92437c83deeed558cb63f75ea654e60818961d58d6f832c7858fbc3acc3697c86058d63f54039b4aa65691e326185a560ba5c06ace95fb5d4c6fc860707fe2e2e8e0064ad599db6815e146e94fc99648e35450a79b102820e3b42c3abf237e7a5fa1bc7becd94ac1f4b161eaef62145c3c9ca5da70390962e6b6d234aa6d8a959f9a61241cf20c984165f46c859d35d0563b9e002f8840d66080b65693e39a43dde0bbc31fa895f340a5c477050d79502b34ab77a4c2b96153ce802cbd6ee962742f88f8feea69bdd3bcfa0acbefc10bf3e729a32db971c9090209b6334d7137779068ced9f35fe5814798457398438f159ec524249d59ba06552f381b958a80d708ca37e1459cdc8dc10a4430f1370ca805b7967fcfc71a213ad1b183698a07828af9e16282a7ccc4148e77c0ccc9dc87c7510f76c56f337ab7bf547e95613b27f2ca28a5bc5ccc90f82c2a3c69d9c3ab1abea492f6c2a702778a4e1d80653394e98546d9de6ae44565bcfdf8fc76896fb30d1facb9e99c8d978a098584c9f9306682ee72b5412c7eb10ac26d52fe5f8ea5eb35a75eb993d04b242f34ab81280f2ef5a"}) setresuid$auto(0x0, 0x0, r1) r2 = getuid() shmctl$auto_SHM_STAT_ANY(0xfffffffb, 0xf, &(0x7f00000003c0)={{0x6, 0x0, 0x0, 0x1, 0x7fffffff, 0x7, 0x8000}, 0x8, 0x81, 0x4, 0x8, @raw=0x7f, @raw=0xfffffff7, 0x8, 0x0, &(0x7f0000000200)="4caee39b3264b852257bb9117f63a830cc9451b96b8ca51281ed04e4dfc29b06543c61d56db7fcc4cde1e12e68477b3efc14e6f466e1bcfb1c81f97ba23ad4755f452ca674c135b9b7487775a6ee414786477942a1d307094e0e69fef920d6cde856a4856b3f95d4439c09b2816ce061cbad4b4a14967c1293cafedfb972998ee893", &(0x7f0000000300)="5381e2497c866783faf98209d9cac512b74dae688f94e264084eb9211cb898b16f3ba8a9e90419c3f822beb4a00b74efe885d7fa59b1b4b161c59e85195fc33183ecc8ae8e2e89fee9bce1a0fb4fc1c2ebb4d7bd87c3202fa88f316df8eadb2ad98f8cc18693da7f1863517923ff283ab1799cc008dd0a943ef4998ca28f1d5a4055156fb9e4394e8db83b40c48df88b"}) keyctl$auto_KEY_SPEC_USER_SESSION_KEYRING(0x6, 0x0, r2, r3, 0xfffffffffffffffb) socket(0x18, 0x4, 0x206) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE_EXT(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000000) write$auto(0xffffffffffffffff, 0x0, 0x5c8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x38}, 0x6, 0x0, 0x4, 0x9}, 0x9}, 0x3, 0x1f00) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x149242, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x29, 0x2, 0x0) socket(0x21, 0x2, 0x2) listen$auto(0x3, 0x81) 7.453842828s ago: executing program 1 (id=3333): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x800, 0x0) (async) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) (async) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/dynamic_events\x00', 0x201, 0x0) (async, rerun: 32) ftruncate$auto(0x3, 0x700) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x80000, 0x0) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) (async) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, r0, 0x8000) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async, rerun: 32) open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) (rerun: 32) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r0, 0x7d4, &(0x7f0000000080)={@siginfo_0_0={0x80000000, 0xf, 0xfff, @_sigpoll={0x8000, r0}}}, 0x2) 6.459474273s ago: executing program 1 (id=3336): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) socket(0x2, 0x1, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/console\x00', 0x48600, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) symlink$auto(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') readlink$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x40) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/memfd_noexec\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, 0x0) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x88) write$auto(r0, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84U\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@\x025`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc,^U!*\xaf\x9df\xed`NGz\xc5\xdbQ\x9a\xab\xa1[\"\xa9Q\xbem\xe2\x1f>o\xf6\xed\x1c\v\x00x', 0x40000100000a3d9) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d00", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d}) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram8\x00', 0x840, 0x0) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) 5.852890368s ago: executing program 2 (id=3341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050324bd700008007b000800000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x40000, 0x0, 0x40008}, 0x0) r4 = prctl$auto(0x5, 0x80000000, 0x0, 0x78, 0x8) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x201, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x5}, 0xa) getsockopt$auto_SO_REUSEADDR(r4, 0x8000, 0x2, &(0x7f0000000040)='^\x92[\x00', &(0x7f00000000c0)=0x6) read$auto(0xffffffffffffffff, 0x0, 0x20) 5.593328955s ago: executing program 2 (id=3343): r0 = prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setreuid$auto(0x0, 0x7) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x3e00, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) getsockopt$auto_SO_NETNS_COOKIE(r1, 0x0, 0x47, 0x0, &(0x7f00000001c0)=0xcfc2) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) unshare$auto(0x8000000) ioctl$auto_PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000080)=0x1) socket$nl_generic(0x10, 0x3, 0x10) 5.450538503s ago: executing program 0 (id=3344): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r0, 0x402, 0xffffffffffffffff) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r1, 0x402, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x5, 0x7, 0x4, 0x10, 0xffffffffffffffff, 0x4003ffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram6\x00', 0xc6fc1, 0x0) r2 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000200)=0x1005) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x40, 0x2000c, 0xdf, 0x20eb1, r2, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) r3 = socket(0x26, 0x4, 0x503) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'vlan0\x00'}) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) write$auto(r4, &(0x7f0000000400)='\x00\x00_\x90', 0x74c) mount$auto(0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) acct$auto(&(0x7f0000000100)='\x00') r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r5, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) ioctl$auto(0x3, 0x80004509, 0x10000000000402) ioctl$auto(0x3, 0x800005411, 0x38) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) 4.763060974s ago: executing program 1 (id=3345): mmap$auto(0x8800004006, 0x10400005, 0x2000000000000fd8, 0x9b72, 0xffffffffffffffff, 0x80000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram10\x00', 0x161642, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) mlockall$auto(0x800000000000005) r3 = socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x1, 0xca, 0xfffffffffffffffc, 0x5) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r4 = io_uring_setup$auto(0x3, 0x0) close_range$auto(r2, r3, 0x7f) mmap$auto(0x2ddb, 0x9, 0x2, 0x9b72, r1, 0x3) futex_wait$auto(0x0, 0x0, 0x7f, 0x2, 0x0, 0x1) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) ioctl$auto(r1, 0x814b, r4) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x100) r5 = pidfd_open$auto(0x1, 0x0) setns(r5, 0x60020000) syz_clone(0x10008000, 0x0, 0x8, 0x0, 0x0, 0x0) 4.741407059s ago: executing program 2 (id=3346): socket(0x2, 0x1, 0x0) sysfs$auto(0x2, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) socket(0xa, 0x3, 0x3b) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x1c9201, 0x0) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=@batch={0xfffffffffffffffd, 0x1, 0x8, 0x10001, 0xd9, 0xffffffffffffffff, 0x1, 0xff}, 0x2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000003fc0)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff011) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 4.369326294s ago: executing program 1 (id=3347): mkdir$auto(&(0x7f0000000480)='}[,&*}\x00', 0x8005) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f00000002c0)='nfsd\x00\vz\xb4~h\x14#\x0eG\xc7\xbfc\xdaX\xabj\xcbEj\xc5\xc8\x13M\xe7\x18P\x01y\xcbXy\xf3\x9d\x96\xb1\xf9\xa3X\xd5\x19\x15A\b\x17\xb8~\x9a\x18\x9b\xe4+X\xee[iU ?\x12\x9aL\xd9\xe3\xaf\xa4}\x02\x18r\x1d\v\x888\xdc;\x0fn\xbdC\x0e\x18\x1aT\xc2^\x13m\xcf\"\xf4\x80\x7f\xc1\a:9\ns\xea\x059tj\x89\xafc\xe9\x19\xe8D\xd6\xf4\xc0i0\x93\x1e,\xeeC\x89f*\x8e(Z\xc5\xff\xa19_\x94\xfemU\xb0\x8b\x17`\x84m\xaaY\x8d\x80\x8cC!\xb09~]E\xac)\xb9 u\xfe\xed\xeb\x99&\x8dCI\xa5\x81\x97!\x9dk\xcbK\xb1\xe1\x17\xd9mC\xc3\xcd\xb7!\xf2\xcf\x16\xf1(k\x8f\x01;.b\x85u\xd6\xf1\x86\xb85\xc8\xed\xffB5\x10\x95\xaf\x8e\xc5\x99\x9f\x9dDr.\x9e\xa84;\xf9\xcaj\xb0\a\xb3\x9c$@\xb3\nG\xe9\x15\x14u\xaa\xc2.g\xe9\xd2\xd1\"\xda|\x8c\x92\xf2f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 2.962860926s ago: executing program 3 (id=3355): prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x3e00, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) getsockopt$auto_SO_NETNS_COOKIE(r0, 0x0, 0x47, 0x0, &(0x7f00000001c0)=0xcfc2) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) unshare$auto(0x8000000) socket$nl_generic(0x10, 0x3, 0x10) 2.470638812s ago: executing program 0 (id=3356): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D1\x00', 0x1202, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0), 0x0) socket(0x11, 0x3, 0x400) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) connect$auto(r2, &(0x7f00000001c0)=@phonet={0x23, 0x7, 0x7f, 0x62}, 0x7fff) sendfile$auto(r2, r2, 0x0, 0x1) r3 = socket(0x2, 0x1, 0x0) getsockopt$auto(r3, 0x0, 0x60, 0x0, &(0x7f00000000c0)=0x1e) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = open(&(0x7f0000000080)='./file0\x00', 0x14c1c2, 0x106) io_uring_setup$auto(0x9, 0x0) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec3\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r5, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r5, 0xc0506107, 0x0) close_range$auto(r4, 0xfffffffffffff000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, 0x0, 0x0) sendmsg$auto_OVS_FLOW_CMD_DEL(r3, &(0x7f00000027c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048051) 2.468343991s ago: executing program 3 (id=3357): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x11e789c}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.023312437s ago: executing program 3 (id=3358): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) select$auto(0x2000e, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff4d, 0x5, 0x5, 0x800000000001, 0x0, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x4000000000008, 0xfffffffffffffffa, 0xab]}, 0x0) connect$auto(0x3, 0x0, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r0, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) unshare$auto(0x40000080) openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) r1 = socket(0x26, 0x1, 0xfffffffc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) write$auto(0xca, &(0x7f0000000400)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8', 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times\x00', 0x82942, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) setsockopt$auto(r1, 0x0, 0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24100000", @ANYRES16=r2, @ANYBLOB="00042bbd7000fddbdf250600000008001900080000000600010000010000"], 0x24}, 0x1, 0x0, 0x0, 0xc001}, 0x2002c060) 1.937104515s ago: executing program 2 (id=3359): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0xa00006, 0x4001fd, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x40) ioctl$auto_SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, 0x0) socket(0x18, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) write$auto(0x3, 0x0, 0x1000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_vdpa(0x0, r0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) write$auto(0x3, 0x0, 0xfffffdef) connect$auto(0x3, 0x0, 0x55) 1.318146739s ago: executing program 0 (id=3360): clone$auto(0x8e00000000000000, 0xb, 0x0, 0x0, 0x34) mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0x4fffffdf2) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@phonet={0x23, 0x5, 0x6, 0x81}, 0x6a) close_range$auto(0x2, 0x8, 0x0) getdents64$auto(r0, &(0x7f0000000040)={0x309, 0x0, 0xffff, 0x7}, 0x200c8) 268.315934ms ago: executing program 0 (id=3361): socket(0x2, 0x1, 0x0) sysfs$auto(0x2, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r0, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) socket(0xa, 0x3, 0x3b) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x1c9201, 0x0) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=@batch={0xfffffffffffffffd, 0x1, 0x8, 0x10001, 0xd9, 0xffffffffffffffff, 0x1, 0xff}, 0x2) mq_open$auto(&(0x7f0000000080)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5srQ', 0xa7c, 0xc, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff011) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 123.34037ms ago: executing program 3 (id=3362): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) mseal$auto(0x0, 0x7dda, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001ac0)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_NETDEV_CMD_DEV_GET(r1, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000500)=ANY=[@ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x84) 0s ago: executing program 3 (id=3363): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) connect$auto(0x3, 0x0, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r0, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) unshare$auto(0x40000080) openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) r1 = socket(0x26, 0x1, 0xfffffffc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_batadv\x00'}) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) write$auto(0xca, &(0x7f0000000400)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8', 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times\x00', 0x82942, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) setsockopt$auto(r1, 0x0, 0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24100000", @ANYRES16=r2, @ANYBLOB="00042bbd7000fddbdf250600000008001900080000000600010000010000"], 0x24}, 0x1, 0x0, 0x0, 0xc001}, 0x2002c060) kernel console output (not intermixed with test programs): ][T17680] ? __sys_sendmsg+0x18c/0x220 [ 747.617205][T17680] __x64_sys_futex+0x1e0/0x4c0 [ 747.617226][T17680] ? __pfx___x64_sys_futex+0x10/0x10 [ 747.617245][T17680] ? syscall_user_dispatch+0x78/0x140 [ 747.617271][T17680] do_syscall_64+0xcd/0xf80 [ 747.617287][T17680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.617302][T17680] RIP: 0033:0x7fa84178f7c9 [ 747.617314][T17680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.617328][T17680] RSP: 002b:00007fa8426c00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 747.617342][T17680] RAX: ffffffffffffffda RBX: 00007fa8419e5fa8 RCX: 00007fa84178f7c9 [ 747.617352][T17680] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa8419e5fac [ 747.617361][T17680] RBP: 00007fa8419e5fa0 R08: 00007fa8426c1000 R09: 0000000000000000 [ 747.617370][T17680] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 747.617379][T17680] R13: 00007fa8419e6038 R14: 00007ffe25fb7230 R15: 00007ffe25fb7318 [ 747.617398][T17680] [ 747.951501][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2789'. [ 748.236263][T17698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2791'. [ 748.633990][T17707] ERROR: Out of memory at tomoyo_memory_ok. [ 750.038102][T17730] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2799'. [ 750.147299][ T6536] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 752.026732][T17768] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 752.661946][T17798] ICMPv6: process `syz.2.2820' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 752.769214][T17806] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input28 [ 752.874191][T17808] Process accounting resumed [ 753.613880][T17823] Invalid ELF header magic: != ELF [ 753.890215][ T6536] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 753.959619][ T6536] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 754.536791][ T30] audit: type=1800 audit(1764942521.933:19): pid=17844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2832" name="dbroot" dev="configfs" ino=74682 res=0 errno=0 [ 755.614375][T17860] could not allocate digest TFM handle [ 755.906077][T17874] FAULT_INJECTION: forcing a failure. [ 755.906077][T17874] name fail_futex, interval 1, probability 0, space 0, times 0 [ 756.054089][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2841'. [ 756.111504][T17874] CPU: 0 UID: 0 PID: 17874 Comm: syz.1.2835 Tainted: G L syzkaller #0 PREEMPT(full) [ 756.111529][T17874] Tainted: [L]=SOFTLOCKUP [ 756.111534][T17874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 756.111544][T17874] Call Trace: [ 756.111550][T17874] [ 756.111557][T17874] dump_stack_lvl+0x16c/0x1f0 [ 756.111577][T17874] should_fail_ex+0x512/0x640 [ 756.111594][T17874] ? __schedule+0x114c/0x6150 [ 756.111618][T17874] get_futex_key+0x1d0/0x15f0 [ 756.111639][T17874] ? __pfx_get_futex_key+0x10/0x10 [ 756.111672][T17874] futex_wait_setup+0x9d/0x570 [ 756.111692][T17874] __futex_wait+0x193/0x2f0 [ 756.111706][T17874] ? __pfx___futex_wait+0x10/0x10 [ 756.111718][T17874] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 756.111744][T17874] ? __pfx_futex_wake_mark+0x10/0x10 [ 756.111768][T17874] ? futex_hash+0x2c5/0x380 [ 756.111787][T17874] ? futex_private_hash_put+0x160/0x1b0 [ 756.111806][T17874] futex_wait+0xe8/0x380 [ 756.111819][T17874] ? __pfx_futex_wait+0x10/0x10 [ 756.111837][T17874] ? __lock_acquire+0x433/0x22f0 [ 756.111857][T17874] do_futex+0x229/0x350 [ 756.111876][T17874] ? __pfx_do_futex+0x10/0x10 [ 756.111895][T17874] ? fdget+0x187/0x210 [ 756.111909][T17874] ? __sys_sendmsg+0x18c/0x220 [ 756.111929][T17874] __x64_sys_futex+0x1e0/0x4c0 [ 756.111950][T17874] ? __pfx___x64_sys_futex+0x10/0x10 [ 756.111976][T17874] do_syscall_64+0xcd/0xf80 [ 756.111992][T17874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.112006][T17874] RIP: 0033:0x7fa84178f7c9 [ 756.112019][T17874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.112034][T17874] RSP: 002b:00007fa84267e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 756.112048][T17874] RAX: ffffffffffffffda RBX: 00007fa8419e6188 RCX: 00007fa84178f7c9 [ 756.112058][T17874] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa8419e6188 [ 756.112066][T17874] RBP: 00007fa8419e6180 R08: 0000000000000000 R09: 0000000000000000 [ 756.112075][T17874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.112083][T17874] R13: 00007fa8419e6218 R14: 00007ffe25fb7230 R15: 00007ffe25fb7318 [ 756.112103][T17874] [ 757.950371][T17920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2852'. [ 758.266424][ T6536] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 758.273873][ T6536] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 758.355356][ T6536] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 758.580071][ T6536] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 758.592543][ T6536] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 758.677720][ T6536] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 759.407502][T17940] FAULT_INJECTION: forcing a failure. [ 759.407502][T17940] name fail_futex, interval 1, probability 0, space 0, times 0 [ 759.490391][T17940] CPU: 0 UID: 0 PID: 17940 Comm: syz.3.2857 Tainted: G L syzkaller #0 PREEMPT(full) [ 759.490417][T17940] Tainted: [L]=SOFTLOCKUP [ 759.490422][T17940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 759.490431][T17940] Call Trace: [ 759.490436][T17940] [ 759.490442][T17940] dump_stack_lvl+0x16c/0x1f0 [ 759.490461][T17940] should_fail_ex+0x512/0x640 [ 759.490481][T17940] get_futex_key+0x1d0/0x15f0 [ 759.490501][T17940] ? __pfx_get_futex_key+0x10/0x10 [ 759.490519][T17940] ? __pfx___might_resched+0x10/0x10 [ 759.490537][T17940] futex_wake+0xea/0x530 [ 759.490559][T17940] ? __pfx_futex_wake+0x10/0x10 [ 759.490587][T17940] do_futex+0x1e3/0x350 [ 759.490606][T17940] ? __pfx_do_futex+0x10/0x10 [ 759.490623][T17940] ? __might_fault+0xe3/0x190 [ 759.490646][T17940] mm_release+0x24e/0x300 [ 759.490668][T17940] do_exit+0x69e/0x2bd0 [ 759.490686][T17940] ? __pfx_do_exit+0x10/0x10 [ 759.490701][T17940] ? do_raw_spin_lock+0x12c/0x2b0 [ 759.490720][T17940] ? find_held_lock+0x2b/0x80 [ 759.490743][T17940] do_group_exit+0xd3/0x2a0 [ 759.490760][T17940] get_signal+0x2671/0x26d0 [ 759.490787][T17940] ? __pfx_get_signal+0x10/0x10 [ 759.490810][T17940] ? do_futex+0x122/0x350 [ 759.490829][T17940] arch_do_signal_or_restart+0x8f/0x7a0 [ 759.490848][T17940] ? fdget+0x187/0x210 [ 759.490862][T17940] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 759.490887][T17940] ? __pfx___x64_sys_futex+0x10/0x10 [ 759.490909][T17940] exit_to_user_mode_loop+0x8c/0x540 [ 759.490932][T17940] do_syscall_64+0x4ee/0xf80 [ 759.490948][T17940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.490963][T17940] RIP: 0033:0x7f8ff1f8f7c9 [ 759.490975][T17940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.490988][T17940] RSP: 002b:00007f8ff2e560e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 759.491003][T17940] RAX: fffffffffffffe00 RBX: 00007f8ff21e5fa8 RCX: 00007f8ff1f8f7c9 [ 759.491013][T17940] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8ff21e5fa8 [ 759.491023][T17940] RBP: 00007f8ff21e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 759.491032][T17940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.491040][T17940] R13: 00007f8ff21e6038 R14: 00007ffc91e3a340 R15: 00007ffc91e3a428 [ 759.491059][T17940] [ 760.325430][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2863'. [ 760.361833][T17966] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2863'. [ 761.042524][ T6536] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 761.050105][ T6536] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 761.142669][ T6536] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 762.507575][T18000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2872'. [ 762.690327][T17992] FAULT_INJECTION: forcing a failure. [ 762.690327][T17992] name fail_futex, interval 1, probability 0, space 0, times 0 [ 762.819086][T17992] CPU: 0 UID: 0 PID: 17992 Comm: syz.0.2870 Tainted: G L syzkaller #0 PREEMPT(full) [ 762.819112][T17992] Tainted: [L]=SOFTLOCKUP [ 762.819118][T17992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 762.819126][T17992] Call Trace: [ 762.819132][T17992] [ 762.819138][T17992] dump_stack_lvl+0x16c/0x1f0 [ 762.819158][T17992] should_fail_ex+0x512/0x640 [ 762.819175][T17992] ? __schedule+0x114c/0x6150 [ 762.819199][T17992] get_futex_key+0x1d0/0x15f0 [ 762.819220][T17992] ? __pfx_get_futex_key+0x10/0x10 [ 762.819244][T17992] futex_wait_setup+0x9d/0x570 [ 762.819263][T17992] __futex_wait+0x193/0x2f0 [ 762.819277][T17992] ? __pfx___futex_wait+0x10/0x10 [ 762.819288][T17992] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 762.819313][T17992] ? __pfx_futex_wake_mark+0x10/0x10 [ 762.819337][T17992] ? futex_hash+0x2c5/0x380 [ 762.819356][T17992] ? futex_private_hash_put+0x160/0x1b0 [ 762.819375][T17992] futex_wait+0xe8/0x380 [ 762.819388][T17992] ? __pfx_futex_wait+0x10/0x10 [ 762.819406][T17992] ? __lock_acquire+0x433/0x22f0 [ 762.819426][T17992] do_futex+0x229/0x350 [ 762.819445][T17992] ? __pfx_do_futex+0x10/0x10 [ 762.819464][T17992] ? fdget+0x187/0x210 [ 762.819478][T17992] ? __sys_sendmsg+0x18c/0x220 [ 762.819498][T17992] __x64_sys_futex+0x1e0/0x4c0 [ 762.819519][T17992] ? __pfx___x64_sys_futex+0x10/0x10 [ 762.819538][T17992] ? syscall_user_dispatch+0x78/0x140 [ 762.819564][T17992] do_syscall_64+0xcd/0xf80 [ 762.819580][T17992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.819595][T17992] RIP: 0033:0x7f1e4db8f7c9 [ 762.819607][T17992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.819622][T17992] RSP: 002b:00007f1e4eacf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 762.819636][T17992] RAX: ffffffffffffffda RBX: 00007f1e4dde5fa8 RCX: 00007f1e4db8f7c9 [ 762.819646][T17992] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1e4dde5fa8 [ 762.819655][T17992] RBP: 00007f1e4dde5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 762.819664][T17992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.819672][T17992] R13: 00007f1e4dde6038 R14: 00007ffd1617ce20 R15: 00007ffd1617cf08 [ 762.819691][T17992] [ 765.651435][T18050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2883'. [ 766.008002][T18060] vhci_hcd: invalid port number 16 [ 766.103138][T18053] FAULT_INJECTION: forcing a failure. [ 766.103138][T18053] name fail_futex, interval 1, probability 0, space 0, times 0 [ 766.129938][T18053] CPU: 0 UID: 0 PID: 18053 Comm: syz.3.2884 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.129963][T18053] Tainted: [L]=SOFTLOCKUP [ 766.129968][T18053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 766.129977][T18053] Call Trace: [ 766.129983][T18053] [ 766.129989][T18053] dump_stack_lvl+0x16c/0x1f0 [ 766.130009][T18053] should_fail_ex+0x512/0x640 [ 766.130032][T18053] get_futex_key+0x1d0/0x15f0 [ 766.130054][T18053] ? __pfx_get_futex_key+0x10/0x10 [ 766.130079][T18053] futex_wake+0xea/0x530 [ 766.130098][T18053] ? futex_wait+0x120/0x380 [ 766.130112][T18053] ? __pfx_futex_wait+0x10/0x10 [ 766.130125][T18053] ? __pfx_futex_wake+0x10/0x10 [ 766.130149][T18053] ? __lock_acquire+0x433/0x22f0 [ 766.130169][T18053] do_futex+0x1e3/0x350 [ 766.130188][T18053] ? __pfx_do_futex+0x10/0x10 [ 766.130206][T18053] ? fdget+0x187/0x210 [ 766.130221][T18053] ? __sys_sendmsg+0x18c/0x220 [ 766.130241][T18053] __x64_sys_futex+0x1e0/0x4c0 [ 766.130262][T18053] ? __pfx___x64_sys_futex+0x10/0x10 [ 766.130282][T18053] ? syscall_user_dispatch+0x78/0x140 [ 766.130308][T18053] do_syscall_64+0xcd/0xf80 [ 766.130324][T18053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.130339][T18053] RIP: 0033:0x7f8ff1f8f7c9 [ 766.130352][T18053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.130365][T18053] RSP: 002b:00007f8ff2e560e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 766.130380][T18053] RAX: ffffffffffffffda RBX: 00007f8ff21e5fa8 RCX: 00007f8ff1f8f7c9 [ 766.130389][T18053] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8ff21e5fac [ 766.130398][T18053] RBP: 00007f8ff21e5fa0 R08: 00007f8ff2e57000 R09: 0000000000000000 [ 766.130408][T18053] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 766.130416][T18053] R13: 00007f8ff21e6038 R14: 00007ffc91e3a340 R15: 00007ffc91e3a428 [ 766.130436][T18053] [ 766.871711][T18071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2895'. [ 767.166744][T18083] FAULT_INJECTION: forcing a failure. [ 767.166744][T18083] name failslab, interval 1, probability 0, space 0, times 0 [ 767.236113][T18083] CPU: 0 UID: 0 PID: 18083 Comm: syz.0.2889 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.236139][T18083] Tainted: [L]=SOFTLOCKUP [ 767.236145][T18083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 767.236155][T18083] Call Trace: [ 767.236161][T18083] [ 767.236167][T18083] dump_stack_lvl+0x16c/0x1f0 [ 767.236187][T18083] should_fail_ex+0x512/0x640 [ 767.236203][T18083] ? __kmalloc_cache_noprof+0x5f/0x800 [ 767.236226][T18083] should_failslab+0xc2/0x120 [ 767.236243][T18083] __kmalloc_cache_noprof+0x72/0x800 [ 767.236262][T18083] ? alloc_fs_context+0x57/0x770 [ 767.236284][T18083] ? alloc_fs_context+0x57/0x770 [ 767.236301][T18083] alloc_fs_context+0x57/0x770 [ 767.236322][T18083] mq_init_ns+0x16e/0x400 [ 767.236338][T18083] copy_ipcs+0x3db/0x790 [ 767.236411][T18083] create_new_namespaces+0x20a/0xab0 [ 767.236435][T18083] ? security_capable+0x7e/0x260 [ 767.236460][T18083] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 767.236484][T18083] ksys_unshare+0x45b/0xa40 [ 767.236499][T18083] ? __pfx_ksys_unshare+0x10/0x10 [ 767.236515][T18083] ? xfd_validate_state+0x61/0x180 [ 767.236534][T18083] __x64_sys_unshare+0x31/0x40 [ 767.236549][T18083] do_syscall_64+0xcd/0xf80 [ 767.236565][T18083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.236580][T18083] RIP: 0033:0x7f1e4db8f7c9 [ 767.236593][T18083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.236607][T18083] RSP: 002b:00007f1e4eacf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 767.236621][T18083] RAX: ffffffffffffffda RBX: 00007f1e4dde5fa0 RCX: 00007f1e4db8f7c9 [ 767.236630][T18083] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 767.236638][T18083] RBP: 00007f1e4dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 767.236647][T18083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.236655][T18083] R13: 00007f1e4dde6038 R14: 00007f1e4dde5fa0 R15: 00007ffd1617cf08 [ 767.236675][T18083] [ 767.848198][ T6536] Bluetooth: hci4: unknown advertising packet type: 0xea [ 768.825503][T18105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2896'. [ 768.857431][ T30] audit: type=1800 audit(1764942536.243:20): pid=18110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2898" name="discovery_nqn" dev="configfs" ino=76141 res=0 errno=0 [ 769.446134][T18123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2901'. [ 769.782400][T18133] HfR: entered promiscuous mode [ 769.950236][T18137] mmap: syz.0.2904 (18137): VmData 54300672 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 770.762045][T18156] FAULT_INJECTION: forcing a failure. [ 770.762045][T18156] name failslab, interval 1, probability 0, space 0, times 0 [ 770.832721][T18151] FAULT_INJECTION: forcing a failure. [ 770.832721][T18151] name fail_futex, interval 1, probability 0, space 0, times 0 [ 770.873348][T18156] CPU: 0 UID: 0 PID: 18156 Comm: syz.0.2909 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.873376][T18156] Tainted: [L]=SOFTLOCKUP [ 770.873382][T18156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 770.873391][T18156] Call Trace: [ 770.873397][T18156] [ 770.873403][T18156] dump_stack_lvl+0x16c/0x1f0 [ 770.873423][T18156] should_fail_ex+0x512/0x640 [ 770.873439][T18156] ? __kmalloc_noprof+0xca/0x8f0 [ 770.873461][T18156] should_failslab+0xc2/0x120 [ 770.873478][T18156] __kmalloc_noprof+0xdd/0x8f0 [ 770.873496][T18156] ? lsm_blob_alloc+0x68/0x90 [ 770.873518][T18156] ? lsm_blob_alloc+0x68/0x90 [ 770.873536][T18156] lsm_blob_alloc+0x68/0x90 [ 770.873555][T18156] security_sb_alloc+0x27/0x230 [ 770.873569][T18156] alloc_super+0x24c/0xd00 [ 770.873582][T18156] ? sget_fc+0xd3/0xc20 [ 770.873598][T18156] sget_fc+0x116/0xc20 [ 770.873612][T18156] ? __pfx_set_anon_super_fc+0x10/0x10 [ 770.873634][T18156] ? __pfx_mqueue_fill_super+0x10/0x10 [ 770.873655][T18156] get_tree_nodev+0x28/0x190 [ 770.873669][T18156] mqueue_get_tree+0xf1/0x130 [ 770.873690][T18156] vfs_get_tree+0x8e/0x330 [ 770.873709][T18156] fc_mount_longterm+0x1a/0x270 [ 770.873732][T18156] mq_init_ns+0x2d7/0x400 [ 770.873747][T18156] copy_ipcs+0x3db/0x790 [ 770.873763][T18156] create_new_namespaces+0x20a/0xab0 [ 770.873785][T18156] ? security_capable+0x7e/0x260 [ 770.873808][T18156] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 770.873832][T18156] ksys_unshare+0x45b/0xa40 [ 770.873847][T18156] ? __pfx_ksys_unshare+0x10/0x10 [ 770.873863][T18156] ? xfd_validate_state+0x61/0x180 [ 770.873883][T18156] __x64_sys_unshare+0x31/0x40 [ 770.873897][T18156] do_syscall_64+0xcd/0xf80 [ 770.873914][T18156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.873929][T18156] RIP: 0033:0x7f1e4db8f7c9 [ 770.873941][T18156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.873954][T18156] RSP: 002b:00007f1e4eacf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 770.873968][T18156] RAX: ffffffffffffffda RBX: 00007f1e4dde5fa0 RCX: 00007f1e4db8f7c9 [ 770.873978][T18156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 770.873987][T18156] RBP: 00007f1e4dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 770.873996][T18156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.874004][T18156] R13: 00007f1e4dde6038 R14: 00007f1e4dde5fa0 R15: 00007ffd1617cf08 [ 770.874024][T18156] [ 771.436576][T18151] CPU: 0 UID: 0 PID: 18151 Comm: syz.1.2908 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.436604][T18151] Tainted: [L]=SOFTLOCKUP [ 771.436610][T18151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 771.436619][T18151] Call Trace: [ 771.436624][T18151] [ 771.436630][T18151] dump_stack_lvl+0x16c/0x1f0 [ 771.436650][T18151] should_fail_ex+0x512/0x640 [ 771.436675][T18151] get_futex_key+0x1d0/0x15f0 [ 771.436697][T18151] ? __pfx_get_futex_key+0x10/0x10 [ 771.436721][T18151] futex_wake+0xea/0x530 [ 771.436741][T18151] ? futex_wait+0x120/0x380 [ 771.436754][T18151] ? __pfx_futex_wait+0x10/0x10 [ 771.436768][T18151] ? __pfx_futex_wake+0x10/0x10 [ 771.436792][T18151] ? __lock_acquire+0x433/0x22f0 [ 771.436813][T18151] do_futex+0x1e3/0x350 [ 771.436831][T18151] ? __pfx_do_futex+0x10/0x10 [ 771.436850][T18151] ? fdget+0x187/0x210 [ 771.436865][T18151] ? __sys_sendmsg+0x18c/0x220 [ 771.436885][T18151] __x64_sys_futex+0x1e0/0x4c0 [ 771.436906][T18151] ? __pfx___x64_sys_futex+0x10/0x10 [ 771.436926][T18151] ? syscall_user_dispatch+0x78/0x140 [ 771.436952][T18151] do_syscall_64+0xcd/0xf80 [ 771.436968][T18151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.436983][T18151] RIP: 0033:0x7fa84178f7c9 [ 771.436995][T18151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.437009][T18151] RSP: 002b:00007fa8426c00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 771.437023][T18151] RAX: ffffffffffffffda RBX: 00007fa8419e5fa8 RCX: 00007fa84178f7c9 [ 771.437033][T18151] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa8419e5fac [ 771.437042][T18151] RBP: 00007fa8419e5fa0 R08: 00007fa8426c1000 R09: 0000000000000000 [ 771.437051][T18151] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 771.437059][T18151] R13: 00007fa8419e6038 R14: 00007ffe25fb7230 R15: 00007ffe25fb7318 [ 771.437087][T18151] [ 772.240724][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2913'. [ 773.543382][T18186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2917'. [ 774.139052][T18205] misc userio: No port type given on /dev/userio [ 774.477783][T18200] FAULT_INJECTION: forcing a failure. [ 774.477783][T18200] name failslab, interval 1, probability 0, space 0, times 0 [ 774.560859][T18200] CPU: 0 UID: 0 PID: 18200 Comm: syz.1.2919 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.560885][T18200] Tainted: [L]=SOFTLOCKUP [ 774.560891][T18200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 774.560900][T18200] Call Trace: [ 774.560906][T18200] [ 774.560912][T18200] dump_stack_lvl+0x16c/0x1f0 [ 774.560932][T18200] should_fail_ex+0x512/0x640 [ 774.560949][T18200] ? __kmalloc_cache_noprof+0x5f/0x800 [ 774.560971][T18200] should_failslab+0xc2/0x120 [ 774.560988][T18200] __kmalloc_cache_noprof+0x72/0x800 [ 774.561008][T18200] ? single_open+0x4d/0x1f0 [ 774.561031][T18200] ? __pfx_snd_info_seq_show+0x10/0x10 [ 774.561052][T18200] ? single_open+0x4d/0x1f0 [ 774.561071][T18200] single_open+0x4d/0x1f0 [ 774.561091][T18200] snd_info_text_entry_open+0x179/0x2e0 [ 774.561106][T18200] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 774.561131][T18200] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 774.561154][T18200] proc_reg_open+0x2ab/0x5f0 [ 774.561177][T18200] do_dentry_open+0x748/0x1590 [ 774.561191][T18200] ? __pfx_proc_reg_open+0x10/0x10 [ 774.561216][T18200] vfs_open+0x82/0x3f0 [ 774.561237][T18200] path_openat+0x2078/0x3140 [ 774.561259][T18200] ? __pfx_path_openat+0x10/0x10 [ 774.561281][T18200] do_filp_open+0x20b/0x470 [ 774.561297][T18200] ? __pfx_do_filp_open+0x10/0x10 [ 774.561327][T18200] ? alloc_fd+0x471/0x7d0 [ 774.561347][T18200] do_sys_openat2+0x11f/0x280 [ 774.561366][T18200] ? __pfx_do_sys_openat2+0x10/0x10 [ 774.561392][T18200] __x64_sys_openat+0x174/0x210 [ 774.561412][T18200] ? __pfx___x64_sys_openat+0x10/0x10 [ 774.561439][T18200] do_syscall_64+0xcd/0xf80 [ 774.561455][T18200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.561469][T18200] RIP: 0033:0x7fa84178f7c9 [ 774.561482][T18200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.561496][T18200] RSP: 002b:00007fa8426c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 774.561511][T18200] RAX: ffffffffffffffda RBX: 00007fa8419e5fa0 RCX: 00007fa84178f7c9 [ 774.561521][T18200] RDX: 8f3b7a51b80ebd01 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 774.561530][T18200] RBP: 00007fa841813f91 R08: 0000000000000000 R09: 0000000000000000 [ 774.561539][T18200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.561547][T18200] R13: 00007fa8419e6038 R14: 00007fa8419e5fa0 R15: 00007ffe25fb7318 [ 774.561566][T18200] [ 775.085726][T18220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2924'. [ 775.168578][T18234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2928'. [ 777.234565][ T6536] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 777.234602][ T6536] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 777.526234][ T6536] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 778.048123][T18293] ERROR: Out of memory at tomoyo_memory_ok. [ 778.429670][T18300] netlink: 'syz.2.2944': attribute type 11 has an invalid length. [ 780.310842][ T6536] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 780.320544][ T6536] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 780.419728][ T6536] Bluetooth: hci4: Unable to find connection for big 0xd2 [ 781.038537][T18338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2954'. [ 781.398532][T18342] bond0: invalid ARP target specified [ 782.916322][T18365] FAULT_INJECTION: forcing a failure. [ 782.916322][T18365] name failslab, interval 1, probability 0, space 0, times 0 [ 782.966903][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2956'. [ 783.038954][T18367] rtc_cmos 00:00: Alarms can be up to one day in the future [ 783.086062][T18365] CPU: 0 UID: 0 PID: 18365 Comm: syz.1.2962 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.086092][T18365] Tainted: [L]=SOFTLOCKUP [ 783.086098][T18365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 783.086107][T18365] Call Trace: [ 783.086115][T18365] [ 783.086121][T18365] dump_stack_lvl+0x16c/0x1f0 [ 783.086142][T18365] should_fail_ex+0x512/0x640 [ 783.086162][T18365] ? kmem_cache_alloc_node_noprof+0x65/0x7f0 [ 783.086187][T18365] should_failslab+0xc2/0x120 [ 783.086205][T18365] kmem_cache_alloc_node_noprof+0x78/0x7f0 [ 783.086225][T18365] ? __alloc_skb+0x156/0x410 [ 783.086247][T18365] ? __alloc_skb+0x156/0x410 [ 783.086264][T18365] __alloc_skb+0x156/0x410 [ 783.086278][T18365] ? __alloc_skb+0x35d/0x410 [ 783.086293][T18365] ? __pfx___alloc_skb+0x10/0x10 [ 783.086309][T18365] ? skb_page_frag_refill+0x11b/0x350 [ 783.086334][T18365] ? sk_page_frag_refill+0x6c/0x340 [ 783.086350][T18365] kcm_sendmsg+0x611/0x2ca0 [ 783.086397][T18365] ? __pfx_kcm_sendmsg+0x10/0x10 [ 783.086420][T18365] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 783.086447][T18365] sock_sendmsg+0x3cc/0x470 [ 783.086469][T18365] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 783.086497][T18365] ? __pfx_sock_sendmsg+0x10/0x10 [ 783.086532][T18365] splice_to_socket+0xaf4/0x1110 [ 783.086559][T18365] ? __pfx_splice_to_socket+0x10/0x10 [ 783.086600][T18365] ? lockdep_init_map_type+0x5c/0x270 [ 783.086620][T18365] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 783.086636][T18365] ? __pfx_splice_to_socket+0x10/0x10 [ 783.086653][T18365] direct_splice_actor+0x192/0x6c0 [ 783.086671][T18365] splice_direct_to_actor+0x345/0xa30 [ 783.086688][T18365] ? __pfx_direct_splice_actor+0x10/0x10 [ 783.086708][T18365] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 783.086725][T18365] ? futex_private_hash_put+0x160/0x1b0 [ 783.086751][T18365] do_splice_direct+0x174/0x240 [ 783.086767][T18365] ? __pfx_do_splice_direct+0x10/0x10 [ 783.086786][T18365] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 783.086802][T18365] ? bpf_lsm_file_permission+0x9/0x10 [ 783.086822][T18365] ? security_file_permission+0x71/0x210 [ 783.086840][T18365] ? rw_verify_area+0xcf/0x6c0 [ 783.086866][T18365] do_sendfile+0xb06/0xe50 [ 783.086886][T18365] ? __pfx_do_sendfile+0x10/0x10 [ 783.086908][T18365] ? __x64_sys_futex+0x1e0/0x4c0 [ 783.086931][T18365] ? __x64_sys_futex+0x1e9/0x4c0 [ 783.086953][T18365] __x64_sys_sendfile64+0x1d8/0x220 [ 783.086972][T18365] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 783.086996][T18365] do_syscall_64+0xcd/0xf80 [ 783.087013][T18365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.087029][T18365] RIP: 0033:0x7fa84178f7c9 [ 783.087042][T18365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.087056][T18365] RSP: 002b:00007fa8426c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 783.087078][T18365] RAX: ffffffffffffffda RBX: 00007fa8419e5fa0 RCX: 00007fa84178f7c9 [ 783.087088][T18365] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 783.087097][T18365] RBP: 00007fa841813f91 R08: 0000000000000000 R09: 0000000000000000 [ 783.087106][T18365] R10: 000000007ffff011 R11: 0000000000000246 R12: 0000000000000000 [ 783.087115][T18365] R13: 00007fa8419e6038 R14: 00007fa8419e5fa0 R15: 00007ffe25fb7318 [ 783.087135][T18365] [ 783.843410][ T7347] rtc_cmos 00:00: Alarms can be up to one day in the future [ 783.866329][ T7347] rtc_cmos 00:00: Alarms can be up to one day in the future [ 783.874016][ T7347] rtc_cmos 00:00: Alarms can be up to one day in the future [ 783.949233][ T7347] rtc_cmos 00:00: Alarms can be up to one day in the future [ 783.972987][ T7347] rtc rtc0: __rtc_set_alarm: err=-22 [ 783.994035][T18372] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 785.153355][T18400] FAULT_INJECTION: forcing a failure. [ 785.153355][T18400] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 785.312973][T18400] CPU: 0 UID: 0 PID: 18400 Comm: syz.2.2971 Tainted: G L syzkaller #0 PREEMPT(full) [ 785.313000][T18400] Tainted: [L]=SOFTLOCKUP [ 785.313005][T18400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 785.313015][T18400] Call Trace: [ 785.313020][T18400] [ 785.313027][T18400] dump_stack_lvl+0x16c/0x1f0 [ 785.313049][T18400] should_fail_ex+0x512/0x640 [ 785.313069][T18400] should_fail_alloc_page+0xe7/0x130 [ 785.313089][T18400] prepare_alloc_pages+0x3c2/0x610 [ 785.313105][T18400] ? rcu_is_watching+0x12/0xc0 [ 785.313122][T18400] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 785.313149][T18400] ? stack_trace_save+0x8e/0xc0 [ 785.313165][T18400] ? __pfx_stack_trace_save+0x10/0x10 [ 785.313180][T18400] ? __lock_acquire+0x433/0x22f0 [ 785.313196][T18400] ? stack_depot_save_flags+0x29/0x9b0 [ 785.313213][T18400] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 785.313235][T18400] ? kasan_save_stack+0x42/0x60 [ 785.313247][T18400] ? kasan_save_stack+0x33/0x60 [ 785.313260][T18400] ? kasan_save_track+0x14/0x30 [ 785.313272][T18400] ? __kasan_kmalloc+0xaa/0xb0 [ 785.313283][T18400] ? mon_bin_open+0x1a8/0x4a0 [ 785.313305][T18400] ? do_sys_openat2+0x11f/0x280 [ 785.313324][T18400] ? __x64_sys_openat+0x174/0x210 [ 785.313345][T18400] ? do_syscall_64+0xcd/0xf80 [ 785.313359][T18400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.313377][T18400] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 785.313394][T18400] ? policy_nodemask+0xea/0x4e0 [ 785.313411][T18400] alloc_pages_mpol+0x1fb/0x550 [ 785.313428][T18400] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 785.313448][T18400] alloc_pages_noprof+0x12d/0x180 [ 785.313465][T18400] get_zeroed_page_noprof+0x18/0xb0 [ 785.313479][T18400] mon_alloc_buff+0xce/0x1b0 [ 785.313499][T18400] ? kasan_save_track+0x14/0x30 [ 785.313514][T18400] mon_bin_open+0x207/0x4a0 [ 785.313534][T18400] ? __pfx_mon_bin_open+0x10/0x10 [ 785.313554][T18400] chrdev_open+0x234/0x6a0 [ 785.313569][T18400] ? __pfx_apparmor_file_open+0x10/0x10 [ 785.313583][T18400] ? __pfx_chrdev_open+0x10/0x10 [ 785.313600][T18400] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 785.313621][T18400] do_dentry_open+0x748/0x1590 [ 785.313636][T18400] ? __pfx_chrdev_open+0x10/0x10 [ 785.313657][T18400] vfs_open+0x82/0x3f0 [ 785.313679][T18400] path_openat+0x2078/0x3140 [ 785.313701][T18400] ? __pfx_path_openat+0x10/0x10 [ 785.313724][T18400] do_filp_open+0x20b/0x470 [ 785.313740][T18400] ? __pfx_do_filp_open+0x10/0x10 [ 785.313770][T18400] ? alloc_fd+0x471/0x7d0 [ 785.313790][T18400] do_sys_openat2+0x11f/0x280 [ 785.313809][T18400] ? __pfx_do_sys_openat2+0x10/0x10 [ 785.313835][T18400] __x64_sys_openat+0x174/0x210 [ 785.313855][T18400] ? __pfx___x64_sys_openat+0x10/0x10 [ 785.313889][T18400] do_syscall_64+0xcd/0xf80 [ 785.313906][T18400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.313920][T18400] RIP: 0033:0x7f63d538f7c9 [ 785.313933][T18400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.313947][T18400] RSP: 002b:00007f63d614d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 785.313962][T18400] RAX: ffffffffffffffda RBX: 00007f63d55e5fa0 RCX: 00007f63d538f7c9 [ 785.313972][T18400] RDX: 0000000000121200 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 785.313982][T18400] RBP: 00007f63d5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 785.313991][T18400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.314001][T18400] R13: 00007f63d55e6038 R14: 00007f63d55e5fa0 R15: 00007ffd56fea8f8 [ 785.314021][T18400] [ 786.299314][T18413] random: crng reseeded on system resumption [ 786.356666][T18413] hub 1-0:1.0: USB hub found [ 786.376249][T18413] hub 1-0:1.0: 1 port detected [ 786.460667][T18415] Restarting kernel threads ... [ 786.476801][T18415] Done restarting kernel threads. [ 787.666560][T18446] FAULT_INJECTION: forcing a failure. [ 787.666560][T18446] name failslab, interval 1, probability 0, space 0, times 0 [ 787.736299][T18446] CPU: 0 UID: 7 PID: 18446 Comm: syz.2.2982 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.736325][T18446] Tainted: [L]=SOFTLOCKUP [ 787.736330][T18446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 787.736340][T18446] Call Trace: [ 787.736345][T18446] [ 787.736352][T18446] dump_stack_lvl+0x16c/0x1f0 [ 787.736372][T18446] should_fail_ex+0x512/0x640 [ 787.736389][T18446] ? __kmalloc_cache_noprof+0x5f/0x800 [ 787.736412][T18446] should_failslab+0xc2/0x120 [ 787.736432][T18446] __kmalloc_cache_noprof+0x72/0x800 [ 787.736450][T18446] ? __pfx_inc_ucount+0x10/0x10 [ 787.736467][T18446] ? copy_ipcs+0x108/0x790 [ 787.736485][T18446] ? copy_ipcs+0x108/0x790 [ 787.736498][T18446] copy_ipcs+0x108/0x790 [ 787.736514][T18446] create_new_namespaces+0x20a/0xab0 [ 787.736536][T18446] ? security_capable+0x7e/0x260 [ 787.736559][T18446] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 787.736582][T18446] ksys_unshare+0x45b/0xa40 [ 787.736598][T18446] ? __pfx_ksys_unshare+0x10/0x10 [ 787.736613][T18446] ? xfd_validate_state+0x61/0x180 [ 787.736633][T18446] __x64_sys_unshare+0x31/0x40 [ 787.736648][T18446] do_syscall_64+0xcd/0xf80 [ 787.736664][T18446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.736679][T18446] RIP: 0033:0x7f63d538f7c9 [ 787.736691][T18446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.736705][T18446] RSP: 002b:00007f63d614d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 787.736720][T18446] RAX: ffffffffffffffda RBX: 00007f63d55e5fa0 RCX: 00007f63d538f7c9 [ 787.736729][T18446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 787.736738][T18446] RBP: 00007f63d5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 787.736747][T18446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.736758][T18446] R13: 00007f63d55e6038 R14: 00007f63d55e5fa0 R15: 00007ffd56fea8f8 [ 787.736778][T18446] [ 791.792145][T18465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2987'. [ 794.394819][T18511] ERROR: Out of memory at tomoyo_memory_ok. [ 794.442752][T18511] FAULT_INJECTION: forcing a failure. [ 794.442752][T18511] name failslab, interval 1, probability 0, space 0, times 0 [ 794.534357][T18511] CPU: 0 UID: 0 PID: 18511 Comm: syz.2.2999 Tainted: G L syzkaller #0 PREEMPT(full) [ 794.534385][T18511] Tainted: [L]=SOFTLOCKUP [ 794.534391][T18511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 794.534406][T18511] Call Trace: [ 794.534412][T18511] [ 794.534419][T18511] dump_stack_lvl+0x16c/0x1f0 [ 794.534440][T18511] should_fail_ex+0x512/0x640 [ 794.534458][T18511] ? kmem_cache_alloc_noprof+0x62/0x760 [ 794.534481][T18511] should_failslab+0xc2/0x120 [ 794.534499][T18511] kmem_cache_alloc_noprof+0x75/0x760 [ 794.534518][T18511] ? __kernfs_new_node+0xd2/0x8d0 [ 794.534542][T18511] ? __kernfs_new_node+0xd2/0x8d0 [ 794.534562][T18511] __kernfs_new_node+0xd2/0x8d0 [ 794.534585][T18511] ? __pfx___kernfs_new_node+0x10/0x10 [ 794.534610][T18511] ? find_held_lock+0x2b/0x80 [ 794.534632][T18511] ? kernfs_root+0xee/0x2a0 [ 794.534655][T18511] kernfs_new_node+0x13c/0x1e0 [ 794.534673][T18511] __kernfs_create_file+0x53/0x350 [ 794.534694][T18511] cgroup_addrm_files+0x546/0xc20 [ 794.534722][T18511] ? __xa_store+0x1dc/0x2e0 [ 794.534738][T18511] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 794.534759][T18511] ? __pfx___xa_store+0x10/0x10 [ 794.534782][T18511] ? do_raw_spin_unlock+0x172/0x230 [ 794.534805][T18511] css_populate_dir+0x169/0x570 [ 794.534827][T18511] cgroup_apply_control_enable+0x3f3/0xbb0 [ 794.534857][T18511] cgroup_mkdir+0x5e0/0x12e0 [ 794.534873][T18511] ? __pfx_cgroup_mkdir+0x10/0x10 [ 794.534888][T18511] kernfs_iop_mkdir+0x111/0x190 [ 794.534900][T18511] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 794.534919][T18511] vfs_mkdir+0x731/0xb60 [ 794.534942][T18511] do_mkdirat+0x442/0x5e0 [ 794.534961][T18511] ? __pfx_do_mkdirat+0x10/0x10 [ 794.534976][T18511] ? strncpy_from_user+0x203/0x2e0 [ 794.534993][T18511] ? getname_flags.part.0+0x1c5/0x550 [ 794.535014][T18511] __x64_sys_mkdir+0xef/0x140 [ 794.535031][T18511] do_syscall_64+0xcd/0xf80 [ 794.535047][T18511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.535062][T18511] RIP: 0033:0x7f63d538f7c9 [ 794.535075][T18511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.535089][T18511] RSP: 002b:00007f63d614d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 794.535103][T18511] RAX: ffffffffffffffda RBX: 00007f63d55e5fa0 RCX: 00007f63d538f7c9 [ 794.535113][T18511] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 794.535122][T18511] RBP: 00007f63d5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 794.535131][T18511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.535140][T18511] R13: 00007f63d55e6038 R14: 00007f63d55e5fa0 R15: 00007ffd56fea8f8 [ 794.535161][T18511] [ 794.535210][T18511] cgroup: cgroup_addrm_files: failed to add swappiness, err=-12 [ 795.126333][T18519] ptp ptp0: only physical clock in use now [ 795.189803][T18525] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3003'. [ 795.627217][T18522] FAULT_INJECTION: forcing a failure. [ 795.627217][T18522] name fail_futex, interval 1, probability 0, space 0, times 0 [ 795.807753][T18522] CPU: 0 UID: 0 PID: 18522 Comm: syz.3.3001 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.807780][T18522] Tainted: [L]=SOFTLOCKUP [ 795.807786][T18522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 795.807795][T18522] Call Trace: [ 795.807800][T18522] [ 795.807806][T18522] dump_stack_lvl+0x16c/0x1f0 [ 795.807827][T18522] should_fail_ex+0x512/0x640 [ 795.807847][T18522] get_futex_key+0x1d0/0x15f0 [ 795.807869][T18522] ? __pfx_get_futex_key+0x10/0x10 [ 795.807893][T18522] futex_wake+0xea/0x530 [ 795.807914][T18522] ? futex_wait+0x120/0x380 [ 795.807935][T18522] ? __pfx_futex_wait+0x10/0x10 [ 795.807948][T18522] ? __pfx_futex_wake+0x10/0x10 [ 795.807974][T18522] ? __lock_acquire+0x433/0x22f0 [ 795.807995][T18522] do_futex+0x1e3/0x350 [ 795.808015][T18522] ? __pfx_do_futex+0x10/0x10 [ 795.808034][T18522] ? fdget+0x187/0x210 [ 795.808048][T18522] ? __sys_sendmsg+0x18c/0x220 [ 795.808068][T18522] __x64_sys_futex+0x1e0/0x4c0 [ 795.808089][T18522] ? __pfx___x64_sys_futex+0x10/0x10 [ 795.808109][T18522] ? syscall_user_dispatch+0x78/0x140 [ 795.808142][T18522] do_syscall_64+0xcd/0xf80 [ 795.808159][T18522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.808175][T18522] RIP: 0033:0x7f8ff1f8f7c9 [ 795.808188][T18522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.808202][T18522] RSP: 002b:00007f8ff2e560e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 795.808217][T18522] RAX: ffffffffffffffda RBX: 00007f8ff21e5fa8 RCX: 00007f8ff1f8f7c9 [ 795.808227][T18522] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8ff21e5fac [ 795.808236][T18522] RBP: 00007f8ff21e5fa0 R08: 00007f8ff2e57000 R09: 0000000000000000 [ 795.808245][T18522] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 795.808253][T18522] R13: 00007f8ff21e6038 R14: 00007ffc91e3a340 R15: 00007ffc91e3a428 [ 795.808272][T18522] [ 798.786413][T18569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3014'. [ 799.757589][T18593] FAULT_INJECTION: forcing a failure. [ 799.757589][T18593] name fail_futex, interval 1, probability 0, space 0, times 0 [ 799.822507][T18593] CPU: 0 UID: 0 PID: 18593 Comm: syz.1.3021 Tainted: G L syzkaller #0 PREEMPT(full) [ 799.822533][T18593] Tainted: [L]=SOFTLOCKUP [ 799.822539][T18593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 799.822549][T18593] Call Trace: [ 799.822554][T18593] [ 799.822560][T18593] dump_stack_lvl+0x16c/0x1f0 [ 799.822581][T18593] should_fail_ex+0x512/0x640 [ 799.822602][T18593] get_futex_key+0x1d0/0x15f0 [ 799.822624][T18593] ? __pfx_get_futex_key+0x10/0x10 [ 799.822649][T18593] futex_wake+0xea/0x530 [ 799.822669][T18593] ? futex_wait+0x120/0x380 [ 799.822683][T18593] ? __pfx_futex_wait+0x10/0x10 [ 799.822696][T18593] ? __pfx_futex_wake+0x10/0x10 [ 799.822721][T18593] ? __lock_acquire+0x433/0x22f0 [ 799.822741][T18593] do_futex+0x1e3/0x350 [ 799.822760][T18593] ? __pfx_do_futex+0x10/0x10 [ 799.822779][T18593] ? fdget+0x187/0x210 [ 799.822794][T18593] ? __sys_sendmsg+0x18c/0x220 [ 799.822814][T18593] __x64_sys_futex+0x1e0/0x4c0 [ 799.822835][T18593] ? __pfx___x64_sys_futex+0x10/0x10 [ 799.822855][T18593] ? syscall_user_dispatch+0x78/0x140 [ 799.822882][T18593] do_syscall_64+0xcd/0xf80 [ 799.822898][T18593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.822913][T18593] RIP: 0033:0x7fa84178f7c9 [ 799.822925][T18593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 799.822939][T18593] RSP: 002b:00007fa8426c00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 799.822953][T18593] RAX: ffffffffffffffda RBX: 00007fa8419e5fa8 RCX: 00007fa84178f7c9 [ 799.822963][T18593] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa8419e5fac [ 799.822972][T18593] RBP: 00007fa8419e5fa0 R08: 00007fa8426c1000 R09: 0000000000000000 [ 799.822981][T18593] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 799.822990][T18593] R13: 00007fa8419e6038 R14: 00007ffe25fb7230 R15: 00007ffe25fb7318 [ 799.823009][T18593] [ 802.194338][ T6536] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 802.206031][ T6536] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 802.218470][ T6536] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 802.225895][ T6536] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 802.253815][ T6536] Bluetooth: hci4: Unable to find connection for big 0xd2 [ 802.382009][ T6536] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 804.179412][T18665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3038'. [ 805.860693][T18701] FAULT_INJECTION: forcing a failure. [ 805.860693][T18701] name failslab, interval 1, probability 0, space 0, times 0 [ 806.028472][T18701] CPU: 0 UID: 0 PID: 18701 Comm: syz.3.3046 Tainted: G L syzkaller #0 PREEMPT(full) [ 806.028499][T18701] Tainted: [L]=SOFTLOCKUP [ 806.028510][T18701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 806.028519][T18701] Call Trace: [ 806.028525][T18701] [ 806.028531][T18701] dump_stack_lvl+0x16c/0x1f0 [ 806.028551][T18701] should_fail_ex+0x512/0x640 [ 806.028569][T18701] ? __kmalloc_noprof+0xca/0x8f0 [ 806.028590][T18701] should_failslab+0xc2/0x120 [ 806.028607][T18701] __kmalloc_noprof+0xdd/0x8f0 [ 806.028625][T18701] ? argv_split+0x188/0x440 [ 806.028649][T18701] ? argv_split+0x188/0x440 [ 806.028668][T18701] argv_split+0x188/0x440 [ 806.028689][T18701] ? __pfx___trace_eprobe_create+0x10/0x10 [ 806.028708][T18701] trace_probe_create+0x7d/0x100 [ 806.028730][T18701] ? __pfx_trace_probe_create+0x10/0x10 [ 806.028757][T18701] create_dyn_event+0xee/0x1c0 [ 806.028775][T18701] trace_parse_run_command+0x1a9/0x400 [ 806.028789][T18701] ? __pfx_create_dyn_event+0x10/0x10 [ 806.028808][T18701] ? __pfx_dyn_event_write+0x10/0x10 [ 806.028824][T18701] vfs_write+0x2a0/0x11d0 [ 806.028841][T18701] ? __pfx___mutex_lock+0x10/0x10 [ 806.028859][T18701] ? __pfx_vfs_write+0x10/0x10 [ 806.028886][T18701] ? __fget_files+0x20e/0x3c0 [ 806.028907][T18701] ksys_write+0x12a/0x250 [ 806.028921][T18701] ? __pfx_ksys_write+0x10/0x10 [ 806.028934][T18701] ? syscall_user_dispatch+0x78/0x140 [ 806.028961][T18701] do_syscall_64+0xcd/0xf80 [ 806.028977][T18701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.028991][T18701] RIP: 0033:0x7f8ff1f8f7c9 [ 806.029004][T18701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 806.029017][T18701] RSP: 002b:00007f8ff2e35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 806.029031][T18701] RAX: ffffffffffffffda RBX: 00007f8ff21e6090 RCX: 00007f8ff1f8f7c9 [ 806.029041][T18701] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000007 [ 806.029050][T18701] RBP: 00007f8ff2013f91 R08: 0000000000000000 R09: 0000000000000000 [ 806.029059][T18701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 806.029067][T18701] R13: 00007f8ff21e6128 R14: 00007f8ff21e6090 R15: 00007ffc91e3a428 [ 806.029104][T18701] [ 806.756116][T18721] input: f as /devices/virtual/input/input29 [ 806.994835][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3054'. [ 808.127762][T18765] ERROR: Out of memory at tomoyo_memory_ok. [ 808.672114][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.678517][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.338364][ T30] audit: type=1806 audit(1764942576.733:21): xattr="10" res=-22 [ 809.370528][T18787] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3066'. [ 810.816668][T18802] ima: policy update failed [ 810.849336][ T30] audit: type=1802 audit(1764942578.243:22): pid=18802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3070" res=0 errno=0 [ 812.531093][T18828] FAULT_INJECTION: forcing a failure. [ 812.531093][T18828] name failslab, interval 1, probability 0, space 0, times 0 [ 812.591208][T18828] CPU: 0 UID: 0 PID: 18828 Comm: syz.2.3077 Tainted: G L syzkaller #0 PREEMPT(full) [ 812.591233][T18828] Tainted: [L]=SOFTLOCKUP [ 812.591238][T18828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 812.591246][T18828] Call Trace: [ 812.591251][T18828] [ 812.591257][T18828] dump_stack_lvl+0x16c/0x1f0 [ 812.591277][T18828] should_fail_ex+0x512/0x640 [ 812.591293][T18828] ? fs_reclaim_acquire+0xae/0x150 [ 812.591311][T18828] should_failslab+0xc2/0x120 [ 812.591328][T18828] __kmalloc_noprof+0xdd/0x8f0 [ 812.591346][T18828] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 812.591369][T18828] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 812.591386][T18828] tomoyo_realpath_from_path+0xc2/0x6e0 [ 812.591405][T18828] ? tomoyo_profile+0x47/0x60 [ 812.591427][T18828] tomoyo_path_number_perm+0x245/0x580 [ 812.591442][T18828] ? tomoyo_path_number_perm+0x237/0x580 [ 812.591459][T18828] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 812.591475][T18828] ? find_held_lock+0x2b/0x80 [ 812.591513][T18828] ? find_held_lock+0x2b/0x80 [ 812.591532][T18828] ? hook_file_ioctl_common+0x144/0x410 [ 812.591552][T18828] ? __fget_files+0x20e/0x3c0 [ 812.591570][T18828] security_file_ioctl+0x9b/0x240 [ 812.591587][T18828] __x64_sys_ioctl+0xb7/0x210 [ 812.591609][T18828] do_syscall_64+0xcd/0xf80 [ 812.591625][T18828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.591640][T18828] RIP: 0033:0x7f63d538f7c9 [ 812.591652][T18828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.591666][T18828] RSP: 002b:00007f63d614d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 812.591680][T18828] RAX: ffffffffffffffda RBX: 00007f63d55e5fa0 RCX: 00007f63d538f7c9 [ 812.591689][T18828] RDX: 0000200000000300 RSI: 00000000805c6103 RDI: 0000000000000003 [ 812.591698][T18828] RBP: 00007f63d614d090 R08: 0000000000000000 R09: 0000000000000000 [ 812.591707][T18828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.591721][T18828] R13: 00007f63d55e6038 R14: 00007f63d55e5fa0 R15: 00007ffd56fea8f8 [ 812.591745][T18828] [ 812.594539][T18828] ERROR: Out of memory at tomoyo_realpath_from_path. [ 812.945085][ T6735] Bluetooth: hci2: command 0x1003 tx timeout [ 812.952302][ T6536] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 813.364749][T18836] FAULT_INJECTION: forcing a failure. [ 813.364749][T18836] name failslab, interval 1, probability 0, space 0, times 0 [ 813.414799][T18836] CPU: 0 UID: 7 PID: 18836 Comm: syz.1.3080 Tainted: G L syzkaller #0 PREEMPT(full) [ 813.414828][T18836] Tainted: [L]=SOFTLOCKUP [ 813.414834][T18836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 813.414843][T18836] Call Trace: [ 813.414848][T18836] [ 813.414854][T18836] dump_stack_lvl+0x16c/0x1f0 [ 813.414876][T18836] should_fail_ex+0x512/0x640 [ 813.414893][T18836] ? __kmalloc_cache_noprof+0x5f/0x800 [ 813.414915][T18836] should_failslab+0xc2/0x120 [ 813.414933][T18836] __kmalloc_cache_noprof+0x72/0x800 [ 813.414953][T18836] ? alloc_super+0x52/0xd00 [ 813.414970][T18836] ? alloc_super+0x52/0xd00 [ 813.414981][T18836] alloc_super+0x52/0xd00 [ 813.414993][T18836] ? sget_fc+0xd3/0xc20 [ 813.415009][T18836] sget_fc+0x116/0xc20 [ 813.415022][T18836] ? __pfx_set_anon_super_fc+0x10/0x10 [ 813.415044][T18836] ? __pfx_mqueue_fill_super+0x10/0x10 [ 813.415065][T18836] get_tree_nodev+0x28/0x190 [ 813.415080][T18836] mqueue_get_tree+0xf1/0x130 [ 813.415100][T18836] vfs_get_tree+0x8e/0x330 [ 813.415120][T18836] fc_mount_longterm+0x1a/0x270 [ 813.415142][T18836] mq_init_ns+0x2d7/0x400 [ 813.415157][T18836] copy_ipcs+0x3db/0x790 [ 813.415173][T18836] create_new_namespaces+0x20a/0xab0 [ 813.415195][T18836] ? security_capable+0x7e/0x260 [ 813.415218][T18836] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 813.415241][T18836] ksys_unshare+0x45b/0xa40 [ 813.415256][T18836] ? __pfx_ksys_unshare+0x10/0x10 [ 813.415271][T18836] ? xfd_validate_state+0x61/0x180 [ 813.415291][T18836] __x64_sys_unshare+0x31/0x40 [ 813.415305][T18836] do_syscall_64+0xcd/0xf80 [ 813.415321][T18836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.415336][T18836] RIP: 0033:0x7fa84178f7c9 [ 813.415348][T18836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.415361][T18836] RSP: 002b:00007fa8426c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 813.415375][T18836] RAX: ffffffffffffffda RBX: 00007fa8419e5fa0 RCX: 00007fa84178f7c9 [ 813.415385][T18836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 813.415393][T18836] RBP: 00007fa841813f91 R08: 0000000000000000 R09: 0000000000000000 [ 813.415402][T18836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 813.415411][T18836] R13: 00007fa8419e6038 R14: 00007fa8419e5fa0 R15: 00007ffe25fb7318 [ 813.415430][T18836] [ 814.366025][ T6735] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 814.376022][ T6735] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 814.405594][ T9089] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 814.693601][ T9089] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 814.701166][ T9089] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 814.810842][ T9089] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 815.916772][T18877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3089'. [ 816.026049][ T6536] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 816.913894][T18907] ERROR: Out of memory at tomoyo_memory_ok. [ 818.784186][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3102'. [ 818.817823][T18943] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 818.835047][T18960] sp0: Synchronizing with TNC [ 818.857432][T18943] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 818.939338][T18943] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 818.963784][T18962] ptp ptp0: max value is 1 [ 818.973069][T18943] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 818.982640][T18964] FAULT_INJECTION: forcing a failure. [ 818.982640][T18964] name failslab, interval 1, probability 0, space 0, times 0 [ 819.010136][T18943] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 819.023664][T18943] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 819.030186][T18964] CPU: 0 UID: 0 PID: 18964 Comm: syz.2.3104 Tainted: G L syzkaller #0 PREEMPT(full) [ 819.030209][T18964] Tainted: [L]=SOFTLOCKUP [ 819.030215][T18964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 819.030223][T18964] Call Trace: [ 819.030229][T18964] [ 819.030235][T18964] dump_stack_lvl+0x16c/0x1f0 [ 819.030254][T18964] should_fail_ex+0x512/0x640 [ 819.030271][T18964] ? __kmalloc_noprof+0xca/0x8f0 [ 819.030291][T18964] should_failslab+0xc2/0x120 [ 819.030307][T18964] __kmalloc_noprof+0xdd/0x8f0 [ 819.030325][T18964] ? iter_file_splice_write+0x1cc/0x12b0 [ 819.030346][T18964] ? iter_file_splice_write+0x1cc/0x12b0 [ 819.030360][T18964] iter_file_splice_write+0x1cc/0x12b0 [ 819.030378][T18964] ? kfree+0x2f8/0x6e0 [ 819.030394][T18964] ? copy_splice_read+0x897/0xc20 [ 819.030411][T18964] ? copy_splice_read+0x897/0xc20 [ 819.030424][T18964] ? copy_splice_read+0x89c/0xc20 [ 819.030438][T18964] ? __pfx_iter_file_splice_write+0x10/0x10 [ 819.030455][T18964] ? __lock_acquire+0x433/0x22f0 [ 819.030472][T18964] ? __pfx_copy_splice_read+0x10/0x10 [ 819.030497][T18964] ? __pfx_iter_file_splice_write+0x10/0x10 [ 819.030514][T18964] direct_splice_actor+0x192/0x6c0 [ 819.030531][T18964] splice_direct_to_actor+0x345/0xa30 [ 819.030547][T18964] ? __pfx_direct_splice_actor+0x10/0x10 [ 819.030566][T18964] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 819.030579][T18964] ? get_pid_task+0xfc/0x250 [ 819.030600][T18964] do_splice_direct+0x174/0x240 [ 819.030615][T18964] ? __pfx_do_splice_direct+0x10/0x10 [ 819.030631][T18964] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 819.030648][T18964] ? rw_verify_area+0xcf/0x6c0 [ 819.030672][T18964] do_sendfile+0xb06/0xe50 [ 819.030689][T18964] ? __pfx_do_sendfile+0x10/0x10 [ 819.030702][T18964] ? __fget_files+0x20e/0x3c0 [ 819.030721][T18964] __x64_sys_sendfile64+0x1d8/0x220 [ 819.030738][T18964] ? ksys_write+0x1ac/0x250 [ 819.030752][T18964] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 819.030774][T18964] do_syscall_64+0xcd/0xf80 [ 819.030790][T18964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.030805][T18964] RIP: 0033:0x7f63d538f7c9 [ 819.030817][T18964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.030831][T18964] RSP: 002b:00007f63d614d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 819.030845][T18964] RAX: ffffffffffffffda RBX: 00007f63d55e5fa0 RCX: 00007f63d538f7c9 [ 819.030854][T18964] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 819.030863][T18964] RBP: 00007f63d614d090 R08: 0000000000000000 R09: 0000000000000000 [ 819.030871][T18964] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 819.030880][T18964] R13: 00007f63d55e6038 R14: 00007f63d55e5fa0 R15: 00007ffd56fea8f8 [ 819.030899][T18964] [ 819.348900][T18943] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 819.364991][T18943] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 819.372046][T18943] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 819.380142][T18943] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 819.395042][T18943] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 819.401356][T18943] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 819.408814][T18943] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 819.806466][T18980] FAULT_INJECTION: forcing a failure. [ 819.806466][T18980] name failslab, interval 1, probability 0, space 0, times 0 [ 819.879373][T18980] CPU: 0 UID: 7 PID: 18980 Comm: syz.3.3109 Tainted: G L syzkaller #0 PREEMPT(full) [ 819.879402][T18980] Tainted: [L]=SOFTLOCKUP [ 819.879408][T18980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 819.879417][T18980] Call Trace: [ 819.879423][T18980] [ 819.879430][T18980] dump_stack_lvl+0x16c/0x1f0 [ 819.879451][T18980] should_fail_ex+0x512/0x640 [ 819.879470][T18980] ? __kmalloc_cache_noprof+0x5f/0x800 [ 819.879494][T18980] should_failslab+0xc2/0x120 [ 819.879511][T18980] __kmalloc_cache_noprof+0x72/0x800 [ 819.879530][T18980] ? __pfx_inc_ucount+0x10/0x10 [ 819.879548][T18980] ? copy_ipcs+0x108/0x790 [ 819.879568][T18980] ? copy_ipcs+0x108/0x790 [ 819.879583][T18980] copy_ipcs+0x108/0x790 [ 819.879601][T18980] create_new_namespaces+0x20a/0xab0 [ 819.879624][T18980] ? security_capable+0x7e/0x260 [ 819.879649][T18980] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 819.879674][T18980] ksys_unshare+0x45b/0xa40 [ 819.879690][T18980] ? __pfx_ksys_unshare+0x10/0x10 [ 819.879707][T18980] ? xfd_validate_state+0x61/0x180 [ 819.879727][T18980] __x64_sys_unshare+0x31/0x40 [ 819.879743][T18980] do_syscall_64+0xcd/0xf80 [ 819.879761][T18980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.879777][T18980] RIP: 0033:0x7f8ff1f8f7c9 [ 819.879790][T18980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 819.879805][T18980] RSP: 002b:00007f8ff2e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 819.879821][T18980] RAX: ffffffffffffffda RBX: 00007f8ff21e5fa0 RCX: 00007f8ff1f8f7c9 [ 819.879832][T18980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 819.879842][T18980] RBP: 00007f8ff2013f91 R08: 0000000000000000 R09: 0000000000000000 [ 819.879851][T18980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 819.879860][T18980] R13: 00007f8ff21e6038 R14: 00007f8ff21e5fa0 R15: 00007ffc91e3a428 [ 819.879886][T18980] [ 820.386029][ T9089] Bluetooth: hci3: command 0x0c1a tx timeout [ 820.533939][T19003] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 820.646807][T19008] FAULT_INJECTION: forcing a failure. [ 820.646807][T19008] name failslab, interval 1, probability 0, space 0, times 0 [ 820.689623][T19008] CPU: 0 UID: 0 PID: 19008 Comm: syz.3.3116 Tainted: G L syzkaller #0 PREEMPT(full) [ 820.689648][T19008] Tainted: [L]=SOFTLOCKUP [ 820.689654][T19008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 820.689662][T19008] Call Trace: [ 820.689668][T19008] [ 820.689674][T19008] dump_stack_lvl+0x16c/0x1f0 [ 820.689694][T19008] should_fail_ex+0x512/0x640 [ 820.689710][T19008] ? __kmalloc_noprof+0xca/0x8f0 [ 820.689730][T19008] should_failslab+0xc2/0x120 [ 820.689747][T19008] __kmalloc_noprof+0xdd/0x8f0 [ 820.689764][T19008] ? alloc_pipe_info+0x1ec/0x590 [ 820.689783][T19008] ? alloc_pipe_info+0x1ec/0x590 [ 820.689797][T19008] alloc_pipe_info+0x1ec/0x590 [ 820.689815][T19008] splice_direct_to_actor+0x77d/0xa30 [ 820.689831][T19008] ? __pfx_direct_splice_actor+0x10/0x10 [ 820.689846][T19008] ? __pfx_aa_file_perm+0x10/0x10 [ 820.689865][T19008] ? find_held_lock+0x2b/0x80 [ 820.689886][T19008] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 820.689903][T19008] ? get_pid_task+0xfc/0x250 [ 820.689923][T19008] do_splice_direct+0x174/0x240 [ 820.689938][T19008] ? __pfx_do_splice_direct+0x10/0x10 [ 820.689953][T19008] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 820.689970][T19008] ? rw_verify_area+0xcf/0x6c0 [ 820.689993][T19008] do_sendfile+0xb06/0xe50 [ 820.690010][T19008] ? __pfx_do_sendfile+0x10/0x10 [ 820.690023][T19008] ? __fget_files+0x20e/0x3c0 [ 820.690043][T19008] __x64_sys_sendfile64+0x1d8/0x220 [ 820.690060][T19008] ? ksys_write+0x1ac/0x250 [ 820.690073][T19008] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 820.690096][T19008] do_syscall_64+0xcd/0xf80 [ 820.690112][T19008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.690126][T19008] RIP: 0033:0x7f8ff1f8f7c9 [ 820.690138][T19008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.690152][T19008] RSP: 002b:00007f8ff2e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 820.690166][T19008] RAX: ffffffffffffffda RBX: 00007f8ff21e5fa0 RCX: 00007f8ff1f8f7c9 [ 820.690176][T19008] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 820.690184][T19008] RBP: 00007f8ff2e56090 R08: 0000000000000000 R09: 0000000000000000 [ 820.690192][T19008] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 820.690201][T19008] R13: 00007f8ff21e6038 R14: 00007f8ff21e5fa0 R15: 00007ffc91e3a428 [ 820.690220][T19008] [ 820.986112][ T6536] Bluetooth: hci4: command 0x040f tx timeout [ 821.431071][ T6536] Bluetooth: hci1: command 0x0c1a tx timeout [ 821.712306][ T6536] Bluetooth: hci0: command 0x0419 tx timeout [ 821.743113][T19026] FAULT_INJECTION: forcing a failure. [ 821.743113][T19026] name failslab, interval 1, probability 0, space 0, times 0 [ 821.811956][T19026] CPU: 0 UID: 0 PID: 19026 Comm: syz.1.3119 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.811981][T19026] Tainted: [L]=SOFTLOCKUP [ 821.811986][T19026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 821.811994][T19026] Call Trace: [ 821.812000][T19026] [ 821.812006][T19026] dump_stack_lvl+0x16c/0x1f0 [ 821.812025][T19026] should_fail_ex+0x512/0x640 [ 821.812042][T19026] ? __kvmalloc_node_noprof+0x129/0xa50 [ 821.812067][T19026] should_failslab+0xc2/0x120 [ 821.812083][T19026] __kvmalloc_node_noprof+0x13c/0xa50 [ 821.812104][T19026] ? security_capable+0x7e/0x260 [ 821.812125][T19026] ? proc_sys_call_handler+0x286/0x570 [ 821.812139][T19026] ? ns_capable_noaudit+0xda/0x110 [ 821.812162][T19026] ? proc_sys_call_handler+0x286/0x570 [ 821.812174][T19026] proc_sys_call_handler+0x286/0x570 [ 821.812189][T19026] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 821.812203][T19026] ? splice_from_pipe_next+0x1f7/0x5d0 [ 821.812223][T19026] iter_file_splice_write+0xa24/0x12b0 [ 821.812249][T19026] ? copy_splice_read+0x89c/0xc20 [ 821.812262][T19026] ? __pfx_iter_file_splice_write+0x10/0x10 [ 821.812289][T19026] ? __pfx_copy_splice_read+0x10/0x10 [ 821.812313][T19026] ? __pfx_iter_file_splice_write+0x10/0x10 [ 821.812330][T19026] direct_splice_actor+0x192/0x6c0 [ 821.812347][T19026] splice_direct_to_actor+0x345/0xa30 [ 821.812364][T19026] ? __pfx_direct_splice_actor+0x10/0x10 [ 821.812382][T19026] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 821.812395][T19026] ? get_pid_task+0xfc/0x250 [ 821.812415][T19026] do_splice_direct+0x174/0x240 [ 821.812431][T19026] ? __pfx_do_splice_direct+0x10/0x10 [ 821.812446][T19026] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 821.812464][T19026] ? rw_verify_area+0xcf/0x6c0 [ 821.812487][T19026] do_sendfile+0xb06/0xe50 [ 821.812504][T19026] ? __pfx_do_sendfile+0x10/0x10 [ 821.812517][T19026] ? __fget_files+0x20e/0x3c0 [ 821.812536][T19026] __x64_sys_sendfile64+0x1d8/0x220 [ 821.812553][T19026] ? ksys_write+0x1ac/0x250 [ 821.812567][T19026] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 821.812589][T19026] do_syscall_64+0xcd/0xf80 [ 821.812605][T19026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.812620][T19026] RIP: 0033:0x7fa84178f7c9 [ 821.812632][T19026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.812646][T19026] RSP: 002b:00007fa8426c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 821.812660][T19026] RAX: ffffffffffffffda RBX: 00007fa8419e5fa0 RCX: 00007fa84178f7c9 [ 821.812670][T19026] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 821.812678][T19026] RBP: 00007fa8426c0090 R08: 0000000000000000 R09: 0000000000000000 [ 821.812686][T19026] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 821.812695][T19026] R13: 00007fa8419e6038 R14: 00007fa8419e5fa0 R15: 00007ffe25fb7318 [ 821.812714][T19026] [ 822.184913][T19024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3118'. [ 822.428403][ T6536] Bluetooth: hci3: command 0x0c1a tx timeout [ 823.066073][ T6536] Bluetooth: hci4: command 0x040f tx timeout [ 823.132206][T19047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3126'. [ 823.469630][ T6536] Bluetooth: hci1: command 0x0c1a tx timeout [ 823.788521][ T6536] Bluetooth: hci0: command 0x0419 tx timeout [ 824.106738][T19059] FAULT_INJECTION: forcing a failure. [ 824.106738][T19059] name failslab, interval 1, probability 0, space 0, times 0 [ 824.106769][T19059] CPU: 0 UID: 7 PID: 19059 Comm: syz.3.3130 Tainted: G L syzkaller #0 PREEMPT(full) [ 824.106791][T19059] Tainted: [L]=SOFTLOCKUP [ 824.106796][T19059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 824.106806][T19059] Call Trace: [ 824.106812][T19059] [ 824.106818][T19059] dump_stack_lvl+0x16c/0x1f0 [ 824.106848][T19059] should_fail_ex+0x512/0x640 [ 824.106867][T19059] ? __kmalloc_cache_noprof+0x5f/0x800 [ 824.106891][T19059] should_failslab+0xc2/0x120 [ 824.106908][T19059] __kmalloc_cache_noprof+0x72/0x800 [ 824.106929][T19059] ? alloc_super+0x52/0xd00 [ 824.106946][T19059] ? alloc_super+0x52/0xd00 [ 824.106959][T19059] alloc_super+0x52/0xd00 [ 824.106972][T19059] ? sget_fc+0xd3/0xc20 [ 824.106989][T19059] sget_fc+0x116/0xc20 [ 824.107003][T19059] ? __pfx_set_anon_super_fc+0x10/0x10 [ 824.107026][T19059] ? __pfx_mqueue_fill_super+0x10/0x10 [ 824.107048][T19059] get_tree_nodev+0x28/0x190 [ 824.107064][T19059] mqueue_get_tree+0xf1/0x130 [ 824.107085][T19059] vfs_get_tree+0x8e/0x330 [ 824.107107][T19059] fc_mount_longterm+0x1a/0x270 [ 824.107130][T19059] mq_init_ns+0x2d7/0x400 [ 824.107146][T19059] copy_ipcs+0x3db/0x790 [ 824.107163][T19059] create_new_namespaces+0x20a/0xab0 [ 824.107186][T19059] ? security_capable+0x7e/0x260 [ 824.107211][T19059] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 824.107236][T19059] ksys_unshare+0x45b/0xa40 [ 824.107252][T19059] ? __pfx_ksys_unshare+0x10/0x10 [ 824.107269][T19059] ? xfd_validate_state+0x61/0x180 [ 824.107289][T19059] __x64_sys_unshare+0x31/0x40 [ 824.107304][T19059] do_syscall_64+0xcd/0xf80 [ 824.107321][T19059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.107337][T19059] RIP: 0033:0x7f8ff1f8f7c9 [ 824.107350][T19059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.107365][T19059] RSP: 002b:00007f8ff2e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 824.107382][T19059] RAX: ffffffffffffffda RBX: 00007f8ff21e5fa0 RCX: 00007f8ff1f8f7c9 [ 824.107393][T19059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 824.107404][T19059] RBP: 00007f8ff2013f91 R08: 0000000000000000 R09: 0000000000000000 [ 824.107413][T19059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.107421][T19059] R13: 00007f8ff21e6038 R14: 00007f8ff21e5fa0 R15: 00007ffc91e3a428 [ 824.107441][T19059] [ 825.081068][T19079] FAULT_INJECTION: forcing a failure. [ 825.081068][T19079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.081096][T19079] CPU: 0 UID: 0 PID: 19079 Comm: syz.1.3134 Tainted: G L syzkaller #0 PREEMPT(full) [ 825.081116][T19079] Tainted: [L]=SOFTLOCKUP [ 825.081122][T19079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 825.081130][T19079] Call Trace: [ 825.081135][T19079] [ 825.081141][T19079] dump_stack_lvl+0x16c/0x1f0 [ 825.081160][T19079] should_fail_ex+0x512/0x640 [ 825.081179][T19079] _copy_to_user+0x32/0xd0 [ 825.081196][T19079] simple_read_from_buffer+0xcb/0x170 [ 825.081221][T19079] proc_fail_nth_read+0x197/0x240 [ 825.081240][T19079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 825.081259][T19079] ? rw_verify_area+0xcf/0x6c0 [ 825.081280][T19079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 825.081297][T19079] vfs_read+0x1e4/0xcf0 [ 825.081312][T19079] ? __pfx___mutex_lock+0x10/0x10 [ 825.081330][T19079] ? __pfx_vfs_read+0x10/0x10 [ 825.081348][T19079] ? __fget_files+0x20e/0x3c0 [ 825.081368][T19079] ksys_read+0x12a/0x250 [ 825.081382][T19079] ? __pfx_ksys_read+0x10/0x10 [ 825.081401][T19079] do_syscall_64+0xcd/0xf80 [ 825.081417][T19079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.081432][T19079] RIP: 0033:0x7fa84178e1dc [ 825.081444][T19079] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 825.081458][T19079] RSP: 002b:00007fa8426c0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 825.081471][T19079] RAX: ffffffffffffffda RBX: 00007fa8419e5fa0 RCX: 00007fa84178e1dc [ 825.081480][T19079] RDX: 000000000000000f RSI: 00007fa8426c00a0 RDI: 0000000000000005 [ 825.081489][T19079] RBP: 00007fa8426c0090 R08: 0000000000000000 R09: 0000000000000000 [ 825.081497][T19079] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 825.081505][T19079] R13: 00007fa8419e6038 R14: 00007fa8419e5fa0 R15: 00007ffe25fb7318 [ 825.081524][T19079] [ 825.100620][T19075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3133'. [ 825.146283][ T6536] Bluetooth: hci4: command 0x040f tx timeout [ 825.340082][T19083] netlink: 326 bytes leftover after parsing attributes in process `syz.1.3135'. [ 825.363030][T19083] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.363848][T19083] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.546122][ T6536] Bluetooth: hci1: command 0x0c1a tx timeout [ 825.603041][T19086] FAULT_INJECTION: forcing a failure. [ 825.603041][T19086] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 825.603069][T19086] CPU: 0 UID: 0 PID: 19086 Comm: syz.0.3136 Tainted: G L syzkaller #0 PREEMPT(full) [ 825.603089][T19086] Tainted: [L]=SOFTLOCKUP [ 825.603095][T19086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 825.603103][T19086] Call Trace: [ 825.603108][T19086] [ 825.603114][T19086] dump_stack_lvl+0x16c/0x1f0 [ 825.603133][T19086] should_fail_ex+0x512/0x640 [ 825.603152][T19086] should_fail_alloc_page+0xe7/0x130 [ 825.603170][T19086] prepare_alloc_pages+0x3c2/0x610 [ 825.603188][T19086] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 825.603211][T19086] ? stack_trace_save+0x8e/0xc0 [ 825.603227][T19086] ? __pfx_stack_trace_save+0x10/0x10 [ 825.603243][T19086] ? stack_depot_save_flags+0x29/0x9b0 [ 825.603259][T19086] ? bpf_ksym_find+0x124/0x1c0 [ 825.603278][T19086] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 825.603296][T19086] ? kasan_save_stack+0x33/0x60 [ 825.603309][T19086] ? __kasan_kmalloc+0xaa/0xb0 [ 825.603321][T19086] ? copy_splice_read+0x1a8/0xc20 [ 825.603335][T19086] ? do_splice_read+0x285/0x370 [ 825.603347][T19086] ? splice_direct_to_actor+0x2a1/0xa30 [ 825.603360][T19086] ? do_splice_direct+0x174/0x240 [ 825.603373][T19086] ? do_sendfile+0xb06/0xe50 [ 825.603385][T19086] ? __x64_sys_sendfile64+0x1d8/0x220 [ 825.603401][T19086] ? do_syscall_64+0xcd/0xf80 [ 825.603428][T19086] alloc_pages_bulk_noprof+0x77b/0x1010 [ 825.603454][T19086] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 825.603479][T19086] ? copy_splice_read+0x1a8/0xc20 [ 825.603496][T19086] copy_splice_read+0x1e1/0xc20 [ 825.603514][T19086] ? __pfx_copy_splice_read+0x10/0x10 [ 825.603530][T19086] ? look_up_lock_class+0x6b/0x130 [ 825.603547][T19086] ? lockdep_init_map_type+0x5c/0x270 [ 825.603565][T19086] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 825.603581][T19086] ? __pfx_copy_splice_read+0x10/0x10 [ 825.603595][T19086] do_splice_read+0x285/0x370 [ 825.603611][T19086] splice_direct_to_actor+0x2a1/0xa30 [ 825.603627][T19086] ? __pfx_direct_splice_actor+0x10/0x10 [ 825.603645][T19086] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 825.603659][T19086] ? get_pid_task+0xfc/0x250 [ 825.603686][T19086] do_splice_direct+0x174/0x240 [ 825.603701][T19086] ? __pfx_do_splice_direct+0x10/0x10 [ 825.603716][T19086] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 825.603733][T19086] ? rw_verify_area+0xcf/0x6c0 [ 825.603756][T19086] do_sendfile+0xb06/0xe50 [ 825.603772][T19086] ? __pfx_do_sendfile+0x10/0x10 [ 825.603785][T19086] ? __fget_files+0x20e/0x3c0 [ 825.603804][T19086] __x64_sys_sendfile64+0x1d8/0x220 [ 825.603820][T19086] ? ksys_write+0x1ac/0x250 [ 825.603834][T19086] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 825.603856][T19086] do_syscall_64+0xcd/0xf80 [ 825.603871][T19086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.603886][T19086] RIP: 0033:0x7f1e4db8f7c9 [ 825.603897][T19086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.603911][T19086] RSP: 002b:00007f1e4eacf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 825.603925][T19086] RAX: ffffffffffffffda RBX: 00007f1e4dde5fa0 RCX: 00007f1e4db8f7c9 [ 825.603934][T19086] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 825.603943][T19086] RBP: 00007f1e4eacf090 R08: 0000000000000000 R09: 0000000000000000 [ 825.603951][T19086] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 825.603959][T19086] R13: 00007f1e4dde6038 R14: 00007f1e4dde5fa0 R15: 00007ffd1617cf08 [ 825.603978][T19086] [ 825.761685][T19088] FAULT_INJECTION: forcing a failure. [ 825.761685][T19088] name failslab, interval 1, probability 0, space 0, times 0 [ 825.761722][T19088] CPU: 0 UID: 0 PID: 19088 Comm: syz.0.3137 Tainted: G L syzkaller #0 PREEMPT(full) [ 825.761743][T19088] Tainted: [L]=SOFTLOCKUP [ 825.761748][T19088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 825.761757][T19088] Call Trace: [ 825.761763][T19088] [ 825.761769][T19088] dump_stack_lvl+0x16c/0x1f0 [ 825.761788][T19088] should_fail_ex+0x512/0x640 [ 825.761805][T19088] ? fs_reclaim_acquire+0xae/0x150 [ 825.761824][T19088] should_failslab+0xc2/0x120 [ 825.761841][T19088] __kmalloc_noprof+0xdd/0x8f0 [ 825.761860][T19088] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 825.761884][T19088] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 825.761902][T19088] tomoyo_realpath_from_path+0xc2/0x6e0 [ 825.761922][T19088] ? tomoyo_profile+0x47/0x60 [ 825.761944][T19088] tomoyo_path_number_perm+0x245/0x580 [ 825.761958][T19088] ? tomoyo_path_number_perm+0x237/0x580 [ 825.761976][T19088] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 825.762010][T19088] ? find_held_lock+0x2b/0x80 [ 825.762032][T19088] ? hook_file_ioctl_common+0x144/0x410 [ 825.762052][T19088] ? __fget_files+0x20e/0x3c0 [ 825.762071][T19088] security_file_ioctl+0x9b/0x240 [ 825.762088][T19088] __x64_sys_ioctl+0xb7/0x210 [ 825.762110][T19088] do_syscall_64+0xcd/0xf80 [ 825.762126][T19088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.762140][T19088] RIP: 0033:0x7f1e4db8f7c9 [ 825.762152][T19088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.762166][T19088] RSP: 002b:00007f1e4eacf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 825.762180][T19088] RAX: ffffffffffffffda RBX: 00007f1e4dde5fa0 RCX: 00007f1e4db8f7c9 [ 825.762189][T19088] RDX: 00002000000001c0 RSI: 0000000000008933 RDI: 0000000000000002 [ 825.762198][T19088] RBP: 00007f1e4dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 825.762207][T19088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.762215][T19088] R13: 00007f1e4dde6038 R14: 00007f1e4dde5fa0 R15: 00007ffd1617cf08 [ 825.762235][T19088] [ 825.762241][T19088] ERROR: Out of memory at tomoyo_realpath_from_path. [ 825.870237][ T6536] Bluetooth: hci0: command 0x0419 tx timeout [ 826.459020][T19108] kvm: kvm [19107]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x11e) = 0x1 [ 826.460012][T19108] netlink: 'syz.3.3142': attribute type 22 has an invalid length. [ 827.228380][ T6536] Bluetooth: hci4: command 0x040f tx timeout [ 827.581052][T19113] FAULT_INJECTION: forcing a failure. [ 827.581052][T19113] name failslab, interval 1, probability 0, space 0, times 0 [ 827.581080][T19113] CPU: 0 UID: 7 PID: 19113 Comm: syz.3.3144 Tainted: G L syzkaller #0 PREEMPT(full) [ 827.581100][T19113] Tainted: [L]=SOFTLOCKUP [ 827.581106][T19113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 827.581114][T19113] Call Trace: [ 827.581120][T19113] [ 827.581126][T19113] dump_stack_lvl+0x16c/0x1f0 [ 827.581145][T19113] should_fail_ex+0x512/0x640 [ 827.581162][T19113] ? __kmalloc_noprof+0xca/0x8f0 [ 827.581182][T19113] should_failslab+0xc2/0x120 [ 827.581199][T19113] __kmalloc_noprof+0xdd/0x8f0 [ 827.581217][T19113] ? lsm_blob_alloc+0x68/0x90 [ 827.581239][T19113] ? lsm_blob_alloc+0x68/0x90 [ 827.581258][T19113] lsm_blob_alloc+0x68/0x90 [ 827.581277][T19113] security_prepare_creds+0x2f/0x270 [ 827.581297][T19113] prepare_creds+0x501/0x740 [ 827.581318][T19113] copy_creds+0xa7/0xa50 [ 827.581338][T19113] copy_process+0xf8d/0x74e0 [ 827.581353][T19113] ? __pfx___futex_wait+0x10/0x10 [ 827.581373][T19113] ? __pfx_copy_process+0x10/0x10 [ 827.581390][T19113] ? futex_private_hash_put+0x160/0x1b0 [ 827.581411][T19113] kernel_clone+0xfc/0x910 [ 827.581426][T19113] ? __pfx_kernel_clone+0x10/0x10 [ 827.581449][T19113] __do_sys_clone+0xce/0x120 [ 827.581462][T19113] ? __pfx___do_sys_clone+0x10/0x10 [ 827.581484][T19113] ? xfd_validate_state+0x61/0x180 [ 827.581513][T19113] do_syscall_64+0xcd/0xf80 [ 827.581531][T19113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.581546][T19113] RIP: 0033:0x7f8ff1f8f7c9 [ 827.581558][T19113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 827.581571][T19113] RSP: 002b:00007f8ff2e55fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 827.581586][T19113] RAX: ffffffffffffffda RBX: 00007f8ff21e5fa0 RCX: 00007f8ff1f8f7c9 [ 827.581595][T19113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 827.581604][T19113] RBP: 00007f8ff2013f91 R08: 0000000000000000 R09: 0000000000000000 [ 827.581612][T19113] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 827.581620][T19113] R13: 00007f8ff21e6038 R14: 00007f8ff21e5fa0 R15: 00007ffc91e3a428 [ 827.581640][T19113] [ 827.632747][ T6536] Bluetooth: hci1: command 0x0c1a tx timeout [ 827.758951][T19115] FAULT_INJECTION: forcing a failure. [ 827.758951][T19115] name failslab, interval 1, probability 0, space 0, times 0 [ 827.758992][T19115] CPU: 0 UID: 0 PID: 19115 Comm: syz.3.3145 Tainted: G L syzkaller #0 PREEMPT(full) [ 827.759012][T19115] Tainted: [L]=SOFTLOCKUP [ 827.759017][T19115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 827.759026][T19115] Call Trace: [ 827.759031][T19115] [ 827.759036][T19115] dump_stack_lvl+0x16c/0x1f0 [ 827.759056][T19115] should_fail_ex+0x512/0x640 [ 827.759071][T19115] ? __kvmalloc_node_noprof+0x129/0xa50 [ 827.759096][T19115] should_failslab+0xc2/0x120 [ 827.759112][T19115] __kvmalloc_node_noprof+0x13c/0xa50 [ 827.759133][T19115] ? set_page_refcounted+0x88/0x190 [ 827.759148][T19115] ? seq_read_iter+0x830/0x12d0 [ 827.759165][T19115] ? seq_read_iter+0x830/0x12d0 [ 827.759177][T19115] seq_read_iter+0x830/0x12d0 [ 827.759191][T19115] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 827.759217][T19115] kernfs_fop_read_iter+0x46c/0x610 [ 827.759238][T19115] copy_splice_read+0x618/0xc20 [ 827.759258][T19115] ? __pfx_copy_splice_read+0x10/0x10 [ 827.759274][T19115] ? look_up_lock_class+0x6b/0x130 [ 827.759292][T19115] ? lockdep_init_map_type+0x5c/0x270 [ 827.759311][T19115] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 827.759327][T19115] ? __pfx_copy_splice_read+0x10/0x10 [ 827.759341][T19115] do_splice_read+0x285/0x370 [ 827.759357][T19115] splice_direct_to_actor+0x2a1/0xa30 [ 827.759372][T19115] ? __pfx_direct_splice_actor+0x10/0x10 [ 827.759391][T19115] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 827.759404][T19115] ? get_pid_task+0xfc/0x250 [ 827.759425][T19115] do_splice_direct+0x174/0x240 [ 827.759440][T19115] ? __pfx_do_splice_direct+0x10/0x10 [ 827.759455][T19115] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 827.759472][T19115] ? rw_verify_area+0xcf/0x6c0 [ 827.759495][T19115] do_sendfile+0xb06/0xe50 [ 827.759512][T19115] ? __pfx_do_sendfile+0x10/0x10 [ 827.759525][T19115] ? __fget_files+0x20e/0x3c0 [ 827.759544][T19115] __x64_sys_sendfile64+0x1d8/0x220 [ 827.759561][T19115] ? ksys_write+0x1ac/0x250 [ 827.759577][T19115] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 827.759600][T19115] do_syscall_64+0xcd/0xf80 [ 827.759616][T19115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.759630][T19115] RIP: 0033:0x7f8ff1f8f7c9 [ 827.759642][T19115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 827.759655][T19115] RSP: 002b:00007f8ff2e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 827.759668][T19115] RAX: ffffffffffffffda RBX: 00007f8ff21e5fa0 RCX: 00007f8ff1f8f7c9 [ 827.759678][T19115] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 827.759686][T19115] RBP: 00007f8ff2e56090 R08: 0000000000000000 R09: 0000000000000000 [ 827.759694][T19115] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 827.759702][T19115] R13: 00007f8ff21e6038 R14: 00007f8ff21e5fa0 R15: 00007ffc91e3a428 [ 827.759722][T19115] [ 828.741825][T19092] tty tty51: ldisc open failed (-12), clearing slot 50 [ 828.750167][T19095] pty pty151: ldisc open failed (-12), clearing slot 151 [ 828.762337][T19094] pty pty32: ldisc open failed (-12), clearing slot 32 [ 828.763335][T19098] pty pty183: ldisc open failed (-12), clearing slot 183 [ 828.764152][T19100] pty pty32: ldisc open failed (-12), clearing slot 32 [ 829.263196][T19132] netlink: 'syz.2.3151': attribute type 17 has an invalid length. [ 829.286370][T19132] netlink: 326 bytes leftover after parsing attributes in process `syz.2.3151'. [ 829.853269][T19149] FAULT_INJECTION: forcing a failure. [ 829.853269][T19149] name failslab, interval 1, probability 0, space 0, times 0 [ 829.866444][T19149] CPU: 0 UID: 0 PID: 19149 Comm: syz.3.3153 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.866470][T19149] Tainted: [L]=SOFTLOCKUP [ 829.866475][T19149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 829.866485][T19149] Call Trace: [ 829.866492][T19149] [ 829.866498][T19149] dump_stack_lvl+0x16c/0x1f0 [ 829.866519][T19149] should_fail_ex+0x512/0x640 [ 829.866539][T19149] should_failslab+0xc2/0x120 [ 829.866557][T19149] kmem_cache_alloc_noprof+0x75/0x760 [ 829.866577][T19149] ? __pfx_stack_trace_save+0x10/0x10 [ 829.866593][T19149] ? kernel_text_address+0x8d/0x100 [ 829.866610][T19149] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 829.866634][T19149] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 829.866654][T19149] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 829.866679][T19149] idr_get_free+0x528/0xa30 [ 829.866707][T19149] idr_alloc_u32+0x190/0x2f0 [ 829.866730][T19149] ? __pfx_idr_alloc_u32+0x10/0x10 [ 829.866758][T19149] idr_alloc+0xc0/0x130 [ 829.866778][T19149] ? __pfx_idr_alloc+0x10/0x10 [ 829.866797][T19149] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 829.866822][T19149] tipc_conn_alloc+0x337/0x590 [ 829.866844][T19149] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 829.866866][T19149] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 829.866888][T19149] ? net_generic+0xea/0x2a0 [ 829.866912][T19149] tipc_group_create+0x4ab/0x660 [ 829.866935][T19149] tipc_setsockopt+0x7c5/0xe00 [ 829.866952][T19149] ? __pfx_tipc_setsockopt+0x10/0x10 [ 829.866975][T19149] ? __pfx_tipc_setsockopt+0x10/0x10 [ 829.866991][T19149] do_sock_setsockopt+0xf3/0x1d0 [ 829.867014][T19149] __sys_setsockopt+0x120/0x1a0 [ 829.867034][T19149] __x64_sys_setsockopt+0xbd/0x160 [ 829.867049][T19149] ? do_syscall_64+0x91/0xf80 [ 829.867064][T19149] ? lockdep_hardirqs_on+0x7c/0x110 [ 829.867078][T19149] do_syscall_64+0xcd/0xf80 [ 829.867094][T19149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.867108][T19149] RIP: 0033:0x7f8ff1f8f7c9 [ 829.867121][T19149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.867135][T19149] RSP: 002b:00007f8ff2e35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 829.867149][T19149] RAX: ffffffffffffffda RBX: 00007f8ff21e6090 RCX: 00007f8ff1f8f7c9 [ 829.867159][T19149] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 829.867167][T19149] RBP: 00007f8ff2013f91 R08: 0000000000000014 R09: 0000000000000000 [ 829.867176][T19149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.867202][T19149] R13: 00007f8ff21e6128 R14: 00007f8ff21e6090 R15: 00007ffc91e3a428 [ 829.867222][T19149] [ 830.696290][ T30] audit: type=1800 audit(1764942598.093:23): pid=19166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3158" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 830.869574][T19144] random: crng reseeded on system resumption [ 831.687625][T19196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3166'. [ 832.473879][T19215] lo: entered allmulticast mode [ 832.756714][T19214] lo: left allmulticast mode [ 832.811657][T19228] FAULT_INJECTION: forcing a failure. [ 832.811657][T19228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 832.941441][T19228] CPU: 0 UID: 0 PID: 19228 Comm: syz.0.3177 Tainted: G L syzkaller #0 PREEMPT(full) [ 832.941466][T19228] Tainted: [L]=SOFTLOCKUP [ 832.941471][T19228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 832.941479][T19228] Call Trace: [ 832.941485][T19228] [ 832.941491][T19228] dump_stack_lvl+0x16c/0x1f0 [ 832.941511][T19228] should_fail_ex+0x512/0x640 [ 832.941531][T19228] _copy_to_user+0x32/0xd0 [ 832.941547][T19228] simple_read_from_buffer+0xcb/0x170 [ 832.941571][T19228] proc_fail_nth_read+0x197/0x240 [ 832.941590][T19228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 832.941609][T19228] ? rw_verify_area+0xcf/0x6c0 [ 832.941630][T19228] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 832.941647][T19228] vfs_read+0x1e4/0xcf0 [ 832.941662][T19228] ? __pfx___mutex_lock+0x10/0x10 [ 832.941679][T19228] ? __pfx_vfs_read+0x10/0x10 [ 832.941698][T19228] ? __fget_files+0x20e/0x3c0 [ 832.941718][T19228] ksys_read+0x12a/0x250 [ 832.941731][T19228] ? __pfx_ksys_read+0x10/0x10 [ 832.941750][T19228] do_syscall_64+0xcd/0xf80 [ 832.941766][T19228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.941780][T19228] RIP: 0033:0x7f1e4db8e1dc [ 832.941792][T19228] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 832.941807][T19228] RSP: 002b:00007f1e4eacf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 832.941821][T19228] RAX: ffffffffffffffda RBX: 00007f1e4dde5fa0 RCX: 00007f1e4db8e1dc [ 832.941830][T19228] RDX: 000000000000000f RSI: 00007f1e4eacf0a0 RDI: 0000000000000005 [ 832.941839][T19228] RBP: 00007f1e4eacf090 R08: 0000000000000000 R09: 0000000000000000 [ 832.941848][T19228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.941856][T19228] R13: 00007f1e4dde6038 R14: 00007f1e4dde5fa0 R15: 00007ffd1617cf08 [ 832.941875][T19228] [ 833.778556][T19239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3180'. [ 834.983331][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3183'. [ 835.038089][T19247] FAULT_INJECTION: forcing a failure. [ 835.038089][T19247] name failslab, interval 1, probability 0, space 0, times 0 [ 835.128092][T19247] CPU: 0 UID: 7 PID: 19247 Comm: syz.3.3183 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.128119][T19247] Tainted: [L]=SOFTLOCKUP [ 835.128124][T19247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 835.128134][T19247] Call Trace: [ 835.128139][T19247] [ 835.128146][T19247] dump_stack_lvl+0x16c/0x1f0 [ 835.128166][T19247] should_fail_ex+0x512/0x640 [ 835.128186][T19247] ? __kmalloc_cache_noprof+0x5f/0x800 [ 835.128209][T19247] should_failslab+0xc2/0x120 [ 835.128226][T19247] __kmalloc_cache_noprof+0x72/0x800 [ 835.128247][T19247] ? mqueue_init_fs_context+0x4b/0x260 [ 835.128272][T19247] ? __pfx_mqueue_init_fs_context+0x10/0x10 [ 835.128293][T19247] ? mqueue_init_fs_context+0x4b/0x260 [ 835.128314][T19247] mqueue_init_fs_context+0x4b/0x260 [ 835.128336][T19247] ? __pfx_mqueue_init_fs_context+0x10/0x10 [ 835.128358][T19247] alloc_fs_context+0x460/0x770 [ 835.128379][T19247] mq_init_ns+0x16e/0x400 [ 835.128394][T19247] copy_ipcs+0x3db/0x790 [ 835.128410][T19247] create_new_namespaces+0x20a/0xab0 [ 835.128432][T19247] ? security_capable+0x7e/0x260 [ 835.128456][T19247] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 835.128479][T19247] ksys_unshare+0x45b/0xa40 [ 835.128494][T19247] ? __pfx_ksys_unshare+0x10/0x10 [ 835.128511][T19247] ? xfd_validate_state+0x61/0x180 [ 835.128532][T19247] __x64_sys_unshare+0x31/0x40 [ 835.128546][T19247] do_syscall_64+0xcd/0xf80 [ 835.128562][T19247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.128577][T19247] RIP: 0033:0x7f8ff1f8f7c9 [ 835.128589][T19247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.128603][T19247] RSP: 002b:00007f8ff2e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 835.128616][T19247] RAX: ffffffffffffffda RBX: 00007f8ff21e5fa0 RCX: 00007f8ff1f8f7c9 [ 835.128626][T19247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 835.128635][T19247] RBP: 00007f8ff2013f91 R08: 0000000000000000 R09: 0000000000000000 [ 835.128643][T19247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.128651][T19247] R13: 00007f8ff21e6038 R14: 00007f8ff21e5fa0 R15: 00007ffc91e3a428 [ 835.128671][T19247] [ 836.254200][T19262] blktrace: Concurrent blktraces are not allowed on loop5 [ 837.742374][T19301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3193'. [ 841.476991][T19398] usb usb36: usbfs: process 19398 (syz.0.3220) did not claim interface 0 before use [ 841.608055][T19405] Invalid ELF header magic: != ELF [ 842.323878][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3226'. [ 842.620913][ T6536] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 842.699353][ T6536] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 843.372732][T19438] ERROR: Out of memory at tomoyo_memory_ok. [ 844.138111][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3238'. [ 844.456807][T19477] block nbd9: NBD_DISCONNECT [ 844.675651][T19477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3239'. [ 845.641273][T19494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3242'. [ 847.521830][T19530] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 848.027206][T19536] openvswitch: netlink: Key type 1539 is out of range max 32 [ 848.055043][ T6536] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 848.074471][ T6536] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 848.360631][ T9089] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 848.946573][T19547] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y [ 849.135773][T19550] FAULT_INJECTION: forcing a failure. [ 849.135773][T19550] name fail_futex, interval 1, probability 0, space 0, times 0 [ 849.260789][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3255'. [ 849.283082][T19550] CPU: 0 UID: 7 PID: 19550 Comm: syz.0.3257 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 849.283117][T19550] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 849.283126][T19550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 849.283135][T19550] Call Trace: [ 849.283140][T19550] [ 849.283147][T19550] dump_stack_lvl+0x16c/0x1f0 [ 849.283167][T19550] should_fail_ex+0x512/0x640 [ 849.283187][T19550] get_futex_key+0x1d0/0x15f0 [ 849.283217][T19550] ? find_held_lock+0x2b/0x80 [ 849.283239][T19550] ? __pfx_get_futex_key+0x10/0x10 [ 849.283260][T19550] ? tomoyo_path_number_perm+0x18d/0x580 [ 849.283279][T19550] futex_wake+0xea/0x530 [ 849.283301][T19550] ? __pfx_futex_wake+0x10/0x10 [ 849.283327][T19550] ? do_vfs_ioctl+0x128/0x14f0 [ 849.283349][T19550] do_futex+0x1e3/0x350 [ 849.283368][T19550] ? __pfx_do_futex+0x10/0x10 [ 849.283387][T19550] ? find_held_lock+0x2b/0x80 [ 849.283410][T19550] __x64_sys_futex+0x1e0/0x4c0 [ 849.283430][T19550] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 849.283445][T19550] ? __pfx___x64_sys_futex+0x10/0x10 [ 849.283464][T19550] ? pipe_ioctl+0x7a/0x2b0 [ 849.283479][T19550] ? fput+0x70/0xf0 [ 849.283498][T19550] do_syscall_64+0xcd/0xf80 [ 849.283515][T19550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.283530][T19550] RIP: 0033:0x7f1e4db8f7c9 [ 849.283542][T19550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 849.283556][T19550] RSP: 002b:00007f1e4eacf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 849.283570][T19550] RAX: ffffffffffffffda RBX: 00007f1e4dde5fa8 RCX: 00007f1e4db8f7c9 [ 849.283581][T19550] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1e4dde5fac [ 849.283595][T19550] RBP: 00007f1e4dde5fa0 R08: 00007f1e4ead0000 R09: 0000000000000000 [ 849.283605][T19550] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 849.283614][T19550] R13: 00007f1e4dde6038 R14: 00007ffd1617ce20 R15: 00007ffd1617cf08 [ 849.283633][T19550] [ 850.541514][ T9089] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 850.541537][ T9089] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 850.558491][ T9089] Bluetooth: hci3: Dropping invalid advertising data [ 850.565909][ T9089] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 850.565931][ T9089] Bluetooth: hci3: Dropping invalid advertising data [ 850.579912][ T9089] Bluetooth: hci3: Malformed LE Event: 0x02 [ 850.611981][T19561] FAULT_INJECTION: forcing a failure. [ 850.611981][T19561] name fail_futex, interval 1, probability 0, space 0, times 0 [ 850.697700][T19561] CPU: 0 UID: 0 PID: 19561 Comm: syz.0.3260 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 850.697742][T19561] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 850.697751][T19561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 850.697761][T19561] Call Trace: [ 850.697766][T19561] [ 850.697773][T19561] dump_stack_lvl+0x16c/0x1f0 [ 850.697794][T19561] should_fail_ex+0x512/0x640 [ 850.697811][T19561] ? arch_stack_walk+0xa6/0x100 [ 850.697831][T19561] get_futex_key+0x1d0/0x15f0 [ 850.697852][T19561] ? __pfx_get_futex_key+0x10/0x10 [ 850.697869][T19561] ? stack_trace_save+0x8e/0xc0 [ 850.697885][T19561] ? __pfx_stack_trace_save+0x10/0x10 [ 850.697903][T19561] ? stack_depot_save_flags+0x29/0x9b0 [ 850.697921][T19561] futex_wait_setup+0x9d/0x570 [ 850.697940][T19561] __futex_wait+0x193/0x2f0 [ 850.697954][T19561] ? __pfx___futex_wait+0x10/0x10 [ 850.697970][T19561] ? __pfx_futex_wake_mark+0x10/0x10 [ 850.697994][T19561] ? futex_hash+0x2c5/0x380 [ 850.698013][T19561] ? futex_private_hash_put+0x160/0x1b0 [ 850.698032][T19561] futex_wait+0xe8/0x380 [ 850.698044][T19561] ? __pfx_futex_wait+0x10/0x10 [ 850.698061][T19561] ? putname+0xf5/0x1a0 [ 850.698083][T19561] do_futex+0x229/0x350 [ 850.698101][T19561] ? __pfx_do_futex+0x10/0x10 [ 850.698125][T19561] __x64_sys_futex+0x1e0/0x4c0 [ 850.698144][T19561] ? __x64_sys_openat+0x174/0x210 [ 850.698164][T19561] ? __pfx___x64_sys_futex+0x10/0x10 [ 850.698190][T19561] do_syscall_64+0xcd/0xf80 [ 850.698206][T19561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.698220][T19561] RIP: 0033:0x7f1e4db8f7c9 [ 850.698233][T19561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 850.698247][T19561] RSP: 002b:00007f1e4eaae0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 850.698262][T19561] RAX: ffffffffffffffda RBX: 00007f1e4dde6098 RCX: 00007f1e4db8f7c9 [ 850.698272][T19561] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1e4dde6098 [ 850.698281][T19561] RBP: 00007f1e4dde6090 R08: 0000000000000000 R09: 0000000000000000 [ 850.698290][T19561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.698298][T19561] R13: 00007f1e4dde6128 R14: 00007ffd1617ce20 R15: 00007ffd1617cf08 [ 850.698316][T19561] [ 851.240311][ T9089] Bluetooth: hci1: unexpected event 0x36 length: 123 > 7 [ 851.866827][ T9089] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 851.975975][ T9089] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 852.695840][T19582] FAULT_INJECTION: forcing a failure. [ 852.695840][T19582] name failslab, interval 1, probability 0, space 0, times 0 [ 852.772101][T19582] CPU: 0 UID: 0 PID: 19582 Comm: syz.3.3265 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 852.772138][T19582] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 852.772146][T19582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 852.772156][T19582] Call Trace: [ 852.772161][T19582] [ 852.772168][T19582] dump_stack_lvl+0x16c/0x1f0 [ 852.772188][T19582] should_fail_ex+0x512/0x640 [ 852.772206][T19582] ? __kmalloc_cache_noprof+0x5f/0x800 [ 852.772229][T19582] should_failslab+0xc2/0x120 [ 852.772245][T19582] __kmalloc_cache_noprof+0x72/0x800 [ 852.772265][T19582] ? single_open+0x4d/0x1f0 [ 852.772287][T19582] ? __pfx_snd_info_seq_show+0x10/0x10 [ 852.772308][T19582] ? single_open+0x4d/0x1f0 [ 852.772326][T19582] single_open+0x4d/0x1f0 [ 852.772347][T19582] snd_info_text_entry_open+0x179/0x2e0 [ 852.772361][T19582] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 852.772388][T19582] ? __pfx_snd_info_text_entry_open+0x10/0x10 [ 852.772410][T19582] proc_reg_open+0x2ab/0x5f0 [ 852.772434][T19582] do_dentry_open+0x748/0x1590 [ 852.772448][T19582] ? __pfx_proc_reg_open+0x10/0x10 [ 852.772474][T19582] vfs_open+0x82/0x3f0 [ 852.772495][T19582] path_openat+0x2078/0x3140 [ 852.772517][T19582] ? __pfx_path_openat+0x10/0x10 [ 852.772540][T19582] do_filp_open+0x20b/0x470 [ 852.772557][T19582] ? __pfx_do_filp_open+0x10/0x10 [ 852.772593][T19582] ? alloc_fd+0x471/0x7d0 [ 852.772615][T19582] do_sys_openat2+0x11f/0x280 [ 852.772635][T19582] ? __pfx_do_sys_openat2+0x10/0x10 [ 852.772663][T19582] __x64_sys_openat+0x174/0x210 [ 852.772684][T19582] ? __pfx___x64_sys_openat+0x10/0x10 [ 852.772712][T19582] do_syscall_64+0xcd/0xf80 [ 852.772729][T19582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.772744][T19582] RIP: 0033:0x7f8ff1f8f7c9 [ 852.772757][T19582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 852.772771][T19582] RSP: 002b:00007f8ff2e35038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 852.772786][T19582] RAX: ffffffffffffffda RBX: 00007f8ff21e6090 RCX: 00007f8ff1f8f7c9 [ 852.772795][T19582] RDX: 8f3b7a51b80ebd01 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 852.772805][T19582] RBP: 00007f8ff2013f91 R08: 0000000000000000 R09: 0000000000000000 [ 852.772814][T19582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.772823][T19582] R13: 00007f8ff21e6128 R14: 00007f8ff21e6090 R15: 00007ffc91e3a428 [ 852.772842][T19582] [ 854.149906][T19592] netlink: 'syz.0.3268': attribute type 10 has an invalid length. [ 854.288983][T19594] program syz.2.3267 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 854.346100][T19594] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 854.473795][T19601] can0: slcan on ttyS2. [ 854.793074][T19596] can0 (unregistered): slcan off ttyS2. [ 855.790965][T19612] vhci_hcd: default hub control req: 2304 v0002 i0002 l8 [ 856.922637][T19652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3282'. [ 858.001795][T19673] FAULT_INJECTION: forcing a failure. [ 858.001795][T19673] name failslab, interval 1, probability 0, space 0, times 0 [ 858.210001][T19673] CPU: 0 UID: 0 PID: 19673 Comm: syz.0.3285 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 858.210037][T19673] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 858.210046][T19673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 858.210056][T19673] Call Trace: [ 858.210062][T19673] [ 858.210068][T19673] dump_stack_lvl+0x16c/0x1f0 [ 858.210102][T19673] should_fail_ex+0x512/0x640 [ 858.210120][T19673] ? __kmalloc_noprof+0xca/0x8f0 [ 858.210144][T19673] should_failslab+0xc2/0x120 [ 858.210161][T19673] __kmalloc_noprof+0xdd/0x8f0 [ 858.210179][T19673] ? do_handle_open+0x581/0xd10 [ 858.210198][T19673] ? do_handle_open+0x581/0xd10 [ 858.210213][T19673] do_handle_open+0x581/0xd10 [ 858.210231][T19673] ? __pfx_do_handle_open+0x10/0x10 [ 858.210246][T19673] ? __x64_sys_futex+0x1e0/0x4c0 [ 858.210268][T19673] ? xfd_validate_state+0x61/0x180 [ 858.210288][T19673] ? do_syscall_64+0xcd/0xf80 [ 858.210302][T19673] do_syscall_64+0xcd/0xf80 [ 858.210317][T19673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.210332][T19673] RIP: 0033:0x7f1e4db8f7c9 [ 858.210344][T19673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 858.210358][T19673] RSP: 002b:00007f1e4eaae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 858.210372][T19673] RAX: ffffffffffffffda RBX: 00007f1e4dde6090 RCX: 00007f1e4db8f7c9 [ 858.210381][T19673] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000008 [ 858.210390][T19673] RBP: 00007f1e4dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 858.210399][T19673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.210408][T19673] R13: 00007f1e4dde6128 R14: 00007f1e4dde6090 R15: 00007ffd1617cf08 [ 858.210427][T19673] [ 858.872406][T19692] nbd: must specify at least one socket [ 859.673781][T19710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3296'. [ 861.200706][T19744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3307'. [ 862.055289][T19768] FAULT_INJECTION: forcing a failure. [ 862.055289][T19768] name failslab, interval 1, probability 0, space 0, times 0 [ 862.293982][T19773] FAULT_INJECTION: forcing a failure. [ 862.293982][T19773] name failslab, interval 1, probability 0, space 0, times 0 [ 862.411197][T19768] CPU: 0 UID: 0 PID: 19768 Comm: syz.1.3313 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 862.411229][T19768] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 862.411237][T19768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 862.411245][T19768] Call Trace: [ 862.411250][T19768] [ 862.411256][T19768] dump_stack_lvl+0x16c/0x1f0 [ 862.411276][T19768] should_fail_ex+0x512/0x640 [ 862.411293][T19768] ? __kmalloc_noprof+0xca/0x8f0 [ 862.411313][T19768] should_failslab+0xc2/0x120 [ 862.411329][T19768] __kmalloc_noprof+0xdd/0x8f0 [ 862.411347][T19768] ? __register_sysctl_table+0xb3/0x1900 [ 862.411364][T19768] ? __register_sysctl_table+0xb3/0x1900 [ 862.411377][T19768] __register_sysctl_table+0xb3/0x1900 [ 862.411392][T19768] ? rcu_is_watching+0x12/0xc0 [ 862.411408][T19768] ? __pfx___register_sysctl_table+0x10/0x10 [ 862.411425][T19768] ? __asan_memcpy+0x3c/0x60 [ 862.411447][T19768] register_pidns_sysctls+0x120/0x1c0 [ 862.411464][T19768] ? __ns_common_init+0x24e/0x4b0 [ 862.411480][T19768] copy_pid_ns+0x4ab/0xcd0 [ 862.411496][T19768] ? __memcg_slab_post_alloc_hook+0x472/0x880 [ 862.411514][T19768] ? __pfx_copy_pid_ns+0x10/0x10 [ 862.411532][T19768] ? get_mnt_ns+0xbc/0x1f0 [ 862.411552][T19768] ? copy_mnt_ns+0x59/0xa60 [ 862.411573][T19768] create_new_namespaces+0x2aa/0xab0 [ 862.411599][T19768] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 862.411621][T19768] ksys_unshare+0x45b/0xa40 [ 862.411636][T19768] ? __pfx_ksys_unshare+0x10/0x10 [ 862.411651][T19768] ? xfd_validate_state+0x61/0x180 [ 862.411671][T19768] __x64_sys_unshare+0x31/0x40 [ 862.411685][T19768] do_syscall_64+0xcd/0xf80 [ 862.411701][T19768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.411715][T19768] RIP: 0033:0x7fa84178f7c9 [ 862.411727][T19768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 862.411740][T19768] RSP: 002b:00007fa84269f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 862.411754][T19768] RAX: ffffffffffffffda RBX: 00007fa8419e6090 RCX: 00007fa84178f7c9 [ 862.411763][T19768] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 862.411772][T19768] RBP: 00007fa841813f91 R08: 0000000000000000 R09: 0000000000000000 [ 862.411780][T19768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.411788][T19768] R13: 00007fa8419e6128 R14: 00007fa8419e6090 R15: 00007ffe25fb7318 [ 862.411807][T19768] [ 863.040885][T19773] CPU: 0 UID: 0 PID: 19773 Comm: syz.1.3313 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 863.040919][T19773] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 863.040928][T19773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 863.040937][T19773] Call Trace: [ 863.040942][T19773] [ 863.040948][T19773] dump_stack_lvl+0x16c/0x1f0 [ 863.040968][T19773] should_fail_ex+0x512/0x640 [ 863.040984][T19773] ? kmem_cache_alloc_noprof+0x62/0x760 [ 863.041006][T19773] should_failslab+0xc2/0x120 [ 863.041023][T19773] kmem_cache_alloc_noprof+0x75/0x760 [ 863.041041][T19773] ? find_held_lock+0x2b/0x80 [ 863.041061][T19773] ? copy_pid_ns+0x254/0xcd0 [ 863.041080][T19773] ? copy_pid_ns+0x254/0xcd0 [ 863.041094][T19773] copy_pid_ns+0x254/0xcd0 [ 863.041110][T19773] ? __memcg_slab_post_alloc_hook+0x472/0x880 [ 863.041128][T19773] ? __pfx_copy_pid_ns+0x10/0x10 [ 863.041146][T19773] ? get_mnt_ns+0xbc/0x1f0 [ 863.041166][T19773] ? copy_mnt_ns+0x59/0xa60 [ 863.041183][T19773] ? create_new_namespaces+0x30/0xab0 [ 863.041208][T19773] create_new_namespaces+0x2aa/0xab0 [ 863.041232][T19773] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 863.041255][T19773] ksys_unshare+0x45b/0xa40 [ 863.041271][T19773] ? __pfx_ksys_unshare+0x10/0x10 [ 863.041286][T19773] ? xfd_validate_state+0x61/0x180 [ 863.041306][T19773] __x64_sys_unshare+0x31/0x40 [ 863.041320][T19773] do_syscall_64+0xcd/0xf80 [ 863.041336][T19773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.041351][T19773] RIP: 0033:0x7fa84178f7c9 [ 863.041363][T19773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.041377][T19773] RSP: 002b:00007fa84261b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 863.041390][T19773] RAX: ffffffffffffffda RBX: 00007fa8419e6450 RCX: 00007fa84178f7c9 [ 863.041400][T19773] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 863.041409][T19773] RBP: 00007fa841813f91 R08: 0000000000000000 R09: 0000000000000000 [ 863.041417][T19773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.041425][T19773] R13: 00007fa8419e64e8 R14: 00007fa8419e6450 R15: 00007ffe25fb7318 [ 863.041444][T19773] [ 865.034780][T19818] zswap: compressor _ not available [ 865.655943][T19841] FAULT_INJECTION: forcing a failure. [ 865.655943][T19841] name failslab, interval 1, probability 0, space 0, times 0 [ 865.806792][T19841] CPU: 0 UID: 0 PID: 19841 Comm: syz.0.3330 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 865.806827][T19841] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 865.806836][T19841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 865.806845][T19841] Call Trace: [ 865.806851][T19841] [ 865.806858][T19841] dump_stack_lvl+0x16c/0x1f0 [ 865.806878][T19841] should_fail_ex+0x512/0x640 [ 865.806901][T19841] ? kmem_cache_alloc_lru_noprof+0x66/0x760 [ 865.806926][T19841] should_failslab+0xc2/0x120 [ 865.806943][T19841] kmem_cache_alloc_lru_noprof+0x79/0x760 [ 865.806963][T19841] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 865.806986][T19841] ? sock_alloc_inode+0x25/0x1c0 [ 865.807009][T19841] ? __pfx_sock_alloc_inode+0x10/0x10 [ 865.807027][T19841] ? sock_alloc_inode+0x25/0x1c0 [ 865.807046][T19841] sock_alloc_inode+0x25/0x1c0 [ 865.807065][T19841] alloc_inode+0x64/0x240 [ 865.807085][T19841] sock_alloc+0x40/0x280 [ 865.807104][T19841] __sock_create+0xc2/0x8a0 [ 865.807129][T19841] smc_create_clcsk+0x37/0xd0 [ 865.807149][T19841] ? __pfx_smc_inet_init_sock+0x10/0x10 [ 865.807165][T19841] inet6_create+0xb30/0x12b0 [ 865.807180][T19841] ? inet6_create+0x7f/0x12b0 [ 865.807195][T19841] __sock_create+0x339/0x8a0 [ 865.807219][T19841] __sys_socket+0x153/0x2d0 [ 865.807231][T19841] ? fput+0x70/0xf0 [ 865.807247][T19841] ? __pfx___sys_socket+0x10/0x10 [ 865.807261][T19841] ? xfd_validate_state+0x61/0x180 [ 865.807276][T19841] ? __pfx_ksys_write+0x10/0x10 [ 865.807294][T19841] __x64_sys_socket+0x72/0xb0 [ 865.807306][T19841] ? lockdep_hardirqs_on+0x7c/0x110 [ 865.807320][T19841] do_syscall_64+0xcd/0xf80 [ 865.807336][T19841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.807351][T19841] RIP: 0033:0x7f1e4db8f7c9 [ 865.807363][T19841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.807377][T19841] RSP: 002b:00007f1e4eacf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 865.807392][T19841] RAX: ffffffffffffffda RBX: 00007f1e4dde5fa0 RCX: 00007f1e4db8f7c9 [ 865.807401][T19841] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 000000000000000a [ 865.807410][T19841] RBP: 00007f1e4dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 865.807419][T19841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.807427][T19841] R13: 00007f1e4dde6038 R14: 00007f1e4dde5fa0 R15: 00007ffd1617cf08 [ 865.807454][T19841] [ 865.807463][T19841] socket: no more sockets [ 866.349520][T19858] FAULT_INJECTION: forcing a failure. [ 866.349520][T19858] name failslab, interval 1, probability 0, space 0, times 0 [ 866.384726][T19858] CPU: 0 UID: 0 PID: 19858 Comm: syz.3.3335 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 866.384764][T19858] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 866.384773][T19858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 866.384783][T19858] Call Trace: [ 866.384788][T19858] [ 866.384794][T19858] dump_stack_lvl+0x16c/0x1f0 [ 866.384815][T19858] should_fail_ex+0x512/0x640 [ 866.384832][T19858] ? kmem_cache_alloc_node_noprof+0x65/0x7f0 [ 866.384856][T19858] should_failslab+0xc2/0x120 [ 866.384873][T19858] kmem_cache_alloc_node_noprof+0x78/0x7f0 [ 866.384894][T19858] ? __alloc_skb+0x156/0x410 [ 866.384914][T19858] ? __alloc_skb+0x156/0x410 [ 866.384929][T19858] __alloc_skb+0x156/0x410 [ 866.384943][T19858] ? __alloc_skb+0x35d/0x410 [ 866.384957][T19858] ? __pfx___alloc_skb+0x10/0x10 [ 866.384974][T19858] ? skb_page_frag_refill+0x11b/0x350 [ 866.384998][T19858] ? sk_page_frag_refill+0x6c/0x340 [ 866.385014][T19858] kcm_sendmsg+0x611/0x2ca0 [ 866.385049][T19858] ? __pfx_kcm_sendmsg+0x10/0x10 [ 866.385071][T19858] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 866.385099][T19858] sock_sendmsg+0x3cc/0x470 [ 866.385121][T19858] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 866.385143][T19858] ? __pfx_sock_sendmsg+0x10/0x10 [ 866.385178][T19858] splice_to_socket+0xaf4/0x1110 [ 866.385205][T19858] ? __pfx_splice_to_socket+0x10/0x10 [ 866.385246][T19858] ? lockdep_init_map_type+0x5c/0x270 [ 866.385265][T19858] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 866.385281][T19858] ? __pfx_splice_to_socket+0x10/0x10 [ 866.385298][T19858] direct_splice_actor+0x192/0x6c0 [ 866.385317][T19858] splice_direct_to_actor+0x345/0xa30 [ 866.385334][T19858] ? __pfx_direct_splice_actor+0x10/0x10 [ 866.385353][T19858] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 866.385371][T19858] ? futex_private_hash_put+0x160/0x1b0 [ 866.385392][T19858] do_splice_direct+0x174/0x240 [ 866.385408][T19858] ? __pfx_do_splice_direct+0x10/0x10 [ 866.385424][T19858] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 866.385447][T19858] ? bpf_lsm_file_permission+0x9/0x10 [ 866.385467][T19858] ? security_file_permission+0x71/0x210 [ 866.385486][T19858] ? rw_verify_area+0xcf/0x6c0 [ 866.385510][T19858] do_sendfile+0xb06/0xe50 [ 866.385528][T19858] ? __pfx_do_sendfile+0x10/0x10 [ 866.385545][T19858] ? __x64_sys_futex+0x1e0/0x4c0 [ 866.385563][T19858] ? __x64_sys_futex+0x1e9/0x4c0 [ 866.385585][T19858] __x64_sys_sendfile64+0x1d8/0x220 [ 866.385603][T19858] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 866.385627][T19858] do_syscall_64+0xcd/0xf80 [ 866.385644][T19858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.385659][T19858] RIP: 0033:0x7f8ff1f8f7c9 [ 866.385672][T19858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 866.385687][T19858] RSP: 002b:00007f8ff2e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 866.385701][T19858] RAX: ffffffffffffffda RBX: 00007f8ff21e5fa0 RCX: 00007f8ff1f8f7c9 [ 866.385711][T19858] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 866.385720][T19858] RBP: 00007f8ff2013f91 R08: 0000000000000000 R09: 0000000000000000 [ 866.385729][T19858] R10: 000000007ffff011 R11: 0000000000000246 R12: 0000000000000000 [ 866.385738][T19858] R13: 00007f8ff21e6038 R14: 00007f8ff21e5fa0 R15: 00007ffc91e3a428 [ 866.385758][T19858] [ 867.319671][T19868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3338'. [ 867.491054][T19872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3339'. [ 867.536057][ T9089] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 867.545018][ T9089] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 867.674855][ T9089] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 868.067859][T19889] FAULT_INJECTION: forcing a failure. [ 868.067859][T19889] name failslab, interval 1, probability 0, space 0, times 0 [ 868.171036][T19889] CPU: 0 UID: 7 PID: 19889 Comm: syz.2.3343 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 868.171072][T19889] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 868.171084][T19889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 868.171093][T19889] Call Trace: [ 868.171098][T19889] [ 868.171105][T19889] dump_stack_lvl+0x16c/0x1f0 [ 868.171124][T19889] should_fail_ex+0x512/0x640 [ 868.171142][T19889] ? __kmalloc_cache_noprof+0x5f/0x800 [ 868.171173][T19889] should_failslab+0xc2/0x120 [ 868.171191][T19889] __kmalloc_cache_noprof+0x72/0x800 [ 868.171212][T19889] ? alloc_super+0x52/0xd00 [ 868.171229][T19889] ? alloc_super+0x52/0xd00 [ 868.171392][T19889] alloc_super+0x52/0xd00 [ 868.171414][T19889] ? sget_fc+0xd3/0xc20 [ 868.171432][T19889] sget_fc+0x116/0xc20 [ 868.171446][T19889] ? __pfx_set_anon_super_fc+0x10/0x10 [ 868.171470][T19889] ? __pfx_mqueue_fill_super+0x10/0x10 [ 868.171491][T19889] get_tree_nodev+0x28/0x190 [ 868.171514][T19889] mqueue_get_tree+0xf1/0x130 [ 868.171541][T19889] vfs_get_tree+0x8e/0x330 [ 868.171565][T19889] fc_mount_longterm+0x1a/0x270 [ 868.171590][T19889] mq_init_ns+0x2d7/0x400 [ 868.171605][T19889] copy_ipcs+0x3db/0x790 [ 868.171621][T19889] create_new_namespaces+0x20a/0xab0 [ 868.171643][T19889] ? security_capable+0x7e/0x260 [ 868.171667][T19889] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 868.171689][T19889] ksys_unshare+0x45b/0xa40 [ 868.171705][T19889] ? __pfx_ksys_unshare+0x10/0x10 [ 868.171720][T19889] ? xfd_validate_state+0x61/0x180 [ 868.171740][T19889] __x64_sys_unshare+0x31/0x40 [ 868.171754][T19889] do_syscall_64+0xcd/0xf80 [ 868.171770][T19889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.171785][T19889] RIP: 0033:0x7f63d538f7c9 [ 868.171799][T19889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 868.171813][T19889] RSP: 002b:00007f63d614d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 868.171828][T19889] RAX: ffffffffffffffda RBX: 00007f63d55e5fa0 RCX: 00007f63d538f7c9 [ 868.171838][T19889] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 868.171847][T19889] RBP: 00007f63d5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 868.171856][T19889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.171865][T19889] R13: 00007f63d55e6038 R14: 00007f63d55e5fa0 R15: 00007ffd56fea8f8 [ 868.171885][T19889] [ 869.575625][T19911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3349'. [ 870.126975][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.133340][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.704949][T19934] FAULT_INJECTION: forcing a failure. [ 870.704949][T19934] name failslab, interval 1, probability 0, space 0, times 0 [ 870.766206][T19934] CPU: 0 UID: 0 PID: 19934 Comm: syz.3.3355 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 870.766242][T19934] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 870.766250][T19934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 870.766260][T19934] Call Trace: [ 870.766265][T19934] [ 870.766271][T19934] dump_stack_lvl+0x16c/0x1f0 [ 870.766292][T19934] should_fail_ex+0x512/0x640 [ 870.766309][T19934] ? __kmalloc_cache_noprof+0x5f/0x800 [ 870.766331][T19934] should_failslab+0xc2/0x120 [ 870.766348][T19934] __kmalloc_cache_noprof+0x72/0x800 [ 870.766367][T19934] ? mqueue_init_fs_context+0x4b/0x260 [ 870.766392][T19934] ? __pfx_mqueue_init_fs_context+0x10/0x10 [ 870.766412][T19934] ? mqueue_init_fs_context+0x4b/0x260 [ 870.766433][T19934] mqueue_init_fs_context+0x4b/0x260 [ 870.766455][T19934] ? __pfx_mqueue_init_fs_context+0x10/0x10 [ 870.766477][T19934] alloc_fs_context+0x460/0x770 [ 870.766498][T19934] mq_init_ns+0x16e/0x400 [ 870.766513][T19934] copy_ipcs+0x3db/0x790 [ 870.766529][T19934] create_new_namespaces+0x20a/0xab0 [ 870.766551][T19934] ? security_capable+0x7e/0x260 [ 870.766575][T19934] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 870.766598][T19934] ksys_unshare+0x45b/0xa40 [ 870.766614][T19934] ? __pfx_ksys_unshare+0x10/0x10 [ 870.766629][T19934] ? xfd_validate_state+0x61/0x180 [ 870.766649][T19934] __x64_sys_unshare+0x31/0x40 [ 870.766663][T19934] do_syscall_64+0xcd/0xf80 [ 870.766679][T19934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.766694][T19934] RIP: 0033:0x7f8ff1f8f7c9 [ 870.766705][T19934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.766719][T19934] RSP: 002b:00007f8ff2e56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 870.766733][T19934] RAX: ffffffffffffffda RBX: 00007f8ff21e5fa0 RCX: 00007f8ff1f8f7c9 [ 870.766742][T19934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 870.766751][T19934] RBP: 00007f8ff2013f91 R08: 0000000000000000 R09: 0000000000000000 [ 870.766760][T19934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.766768][T19934] R13: 00007f8ff21e6038 R14: 00007f8ff21e5fa0 R15: 00007ffc91e3a428 [ 870.766787][T19934] [ 870.773642][T19930] snd_virmidi snd_virmidi.0: control 61678:131081:3:y:0 is already present [ 871.158388][T19938] netlink: 334 bytes leftover after parsing attributes in process `syz.3.3357'. [ 872.135078][ T9089] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 872.142654][ T9089] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 872.210256][ T9089] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 872.353583][T19950] FAULT_INJECTION: forcing a failure. [ 872.353583][T19950] name failslab, interval 1, probability 0, space 0, times 0 [ 872.504405][T19950] CPU: 0 UID: 0 PID: 19950 Comm: syz.2.3359 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 872.504443][T19950] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 872.504452][T19950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 872.504461][T19950] Call Trace: [ 872.504467][T19950] [ 872.504473][T19950] dump_stack_lvl+0x16c/0x1f0 [ 872.504493][T19950] should_fail_ex+0x512/0x640 [ 872.504511][T19950] ? kmem_cache_alloc_lru_noprof+0x66/0x760 [ 872.504535][T19950] should_failslab+0xc2/0x120 [ 872.504552][T19950] kmem_cache_alloc_lru_noprof+0x79/0x760 [ 872.504573][T19950] ? __d_alloc+0x35/0xa80 [ 872.504593][T19950] ? __d_alloc+0x35/0xa80 [ 872.504608][T19950] __d_alloc+0x35/0xa80 [ 872.504626][T19950] d_alloc_pseudo+0x1c/0xc0 [ 872.504646][T19950] alloc_file_pseudo+0xcf/0x230 [ 872.504667][T19950] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 872.504686][T19950] ? alloc_fd+0x471/0x7d0 [ 872.504704][T19950] sock_alloc_file+0x50/0x210 [ 872.504730][T19950] __sys_socket+0x1c6/0x2d0 [ 872.504743][T19950] ? __fget_files+0x20e/0x3c0 [ 872.504757][T19950] ? __pfx___sys_socket+0x10/0x10 [ 872.504771][T19950] ? xfd_validate_state+0x61/0x180 [ 872.504791][T19950] __x64_sys_socket+0x72/0xb0 [ 872.504804][T19950] ? lockdep_hardirqs_on+0x7c/0x110 [ 872.504819][T19950] do_syscall_64+0xcd/0xf80 [ 872.504835][T19950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.504850][T19950] RIP: 0033:0x7f63d538f7c9 [ 872.504861][T19950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 872.504876][T19950] RSP: 002b:00007f63d35f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 872.504889][T19950] RAX: ffffffffffffffda RBX: 00007f63d55e6090 RCX: 00007f63d538f7c9 [ 872.504899][T19950] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000018 [ 872.504908][T19950] RBP: 00007f63d5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 872.504920][T19950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.504929][T19950] R13: 00007f63d55e6128 R14: 00007f63d55e6090 R15: 00007ffd56fea8f8 [ 872.504953][T19950] [ 872.505066][T19950] VFS_BUG_ON_INODE(inode_state_read_once(inode) & I_CLEAR) encountered for inode ffff88805ceea900 [ 872.505066][T19950] fs sockfs mode 140777 opflags 0x8 flags 0x0 state 0x300 count 0 [ 873.667147][T19966] FAULT_INJECTION: forcing a failure. [ 873.667147][T19966] name failslab, interval 1, probability 0, space 0, times 0 [ 873.705280][T19950] ------------[ cut here ]------------ [ 873.711133][T19950] kernel BUG at fs/inode.c:1971! [ 873.752499][T19950] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 873.758762][T19950] CPU: 0 UID: 0 PID: 19950 Comm: syz.2.3359 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 873.769688][T19950] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 873.779720][T19950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 873.789751][T19950] RIP: 0010:iput.part.0+0xb3b/0x1190 [ 873.795027][T19950] Code: 4b 68 ff ff 90 0f 0b e8 73 fa 7c ff 90 0f 0b 90 e9 d3 f8 ff ff e8 65 fa 7c ff 48 c7 c6 a0 79 a0 8b 48 89 df e8 26 68 ff ff 90 <0f> 0b e8 4e fa 7c ff 48 c7 c6 00 7a a0 8b 48 89 df e8 0f 68 ff ff [ 873.814617][T19950] RSP: 0018:ffffc900042dfdc8 EFLAGS: 00010296 [ 873.820663][T19950] RAX: 000000000000009f RBX: ffff88805ceea900 RCX: ffffc90011379000 [ 873.828614][T19950] RDX: 0000000000000000 RSI: ffffffff819bf739 RDI: 0000000000000005 [ 873.836563][T19950] RBP: 0000000000000200 R08: 0000000000000005 R09: 0000000000000000 [ 873.844511][T19950] R10: 0000000080000000 R11: 000000000004c9a0 R12: 0000000000000000 [ 873.852459][T19950] R13: ffffffff90878234 R14: ffff88805ceea9d0 R15: dffffc0000000000 [ 873.860584][T19950] FS: 00007f63d35f66c0(0000) GS:ffff888124967000(0000) knlGS:0000000000000000 [ 873.869491][T19950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 873.876051][T19950] CR2: 0000001b31709ff8 CR3: 0000000076008000 CR4: 00000000003526f0 [ 873.884004][T19950] Call Trace: [ 873.887268][T19950] [ 873.890180][T19950] iput+0x35/0x40 [ 873.893802][T19950] __sock_release+0x20b/0x270 [ 873.898463][T19950] __sys_socket+0x23a/0x2d0 [ 873.902943][T19950] ? __fget_files+0x20e/0x3c0 [ 873.907604][T19950] ? __pfx___sys_socket+0x10/0x10 [ 873.912606][T19950] ? xfd_validate_state+0x61/0x180 [ 873.917700][T19950] __x64_sys_socket+0x72/0xb0 [ 873.922352][T19950] ? lockdep_hardirqs_on+0x7c/0x110 [ 873.927529][T19950] do_syscall_64+0xcd/0xf80 [ 873.932012][T19950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.937894][T19950] RIP: 0033:0x7f63d538f7c9 [ 873.942286][T19950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 873.961876][T19950] RSP: 002b:00007f63d35f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 873.970369][T19950] RAX: ffffffffffffffda RBX: 00007f63d55e6090 RCX: 00007f63d538f7c9 [ 873.978322][T19950] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000018 [ 873.986270][T19950] RBP: 00007f63d5413f91 R08: 0000000000000000 R09: 0000000000000000 [ 873.994215][T19950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 874.002163][T19950] R13: 00007f63d55e6128 R14: 00007f63d55e6090 R15: 00007ffd56fea8f8 [ 874.011336][T19950] [ 874.014339][T19950] Modules linked in: [ 874.019289][T19950] ---[ end trace 0000000000000000 ]--- [ 874.035499][T19966] CPU: 0 UID: 0 PID: 19966 Comm: syz.0.3361 Tainted: G UD W L XTNJ syzkaller #0 PREEMPT(full) [ 874.035536][T19966] Tainted: [U]=USER, [D]=DIE, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 874.035546][T19966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 874.035556][T19966] Call Trace: [ 874.035561][T19966] [ 874.035567][T19966] dump_stack_lvl+0x16c/0x1f0 [ 874.035586][T19966] should_fail_ex+0x512/0x640 [ 874.035603][T19966] ? kmem_cache_alloc_node_noprof+0x65/0x7f0 [ 874.035625][T19966] should_failslab+0xc2/0x120 [ 874.035641][T19966] kmem_cache_alloc_node_noprof+0x78/0x7f0 [ 874.035661][T19966] ? __alloc_skb+0x156/0x410 [ 874.035678][T19966] ? __alloc_skb+0x156/0x410 [ 874.035691][T19966] __alloc_skb+0x156/0x410 [ 874.035704][T19966] ? __alloc_skb+0x35d/0x410 [ 874.035717][T19966] ? __pfx___alloc_skb+0x10/0x10 [ 874.035732][T19966] ? skb_page_frag_refill+0x11b/0x350 [ 874.035753][T19966] ? sk_page_frag_refill+0x6c/0x340 [ 874.035767][T19966] kcm_sendmsg+0x611/0x2ca0 [ 874.035792][T19966] ? __pfx_kcm_sendmsg+0x10/0x10 [ 874.035825][T19966] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 874.035849][T19966] sock_sendmsg+0x3cc/0x470 [ 874.035870][T19966] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 874.035890][T19966] ? __pfx_sock_sendmsg+0x10/0x10 [ 874.035916][T19966] splice_to_socket+0xaf4/0x1110 [ 874.035936][T19966] ? __pfx_splice_to_socket+0x10/0x10 [ 874.035962][T19966] ? lockdep_init_map_type+0x5c/0x270 [ 874.035980][T19966] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 874.035994][T19966] ? __pfx_splice_to_socket+0x10/0x10 [ 874.036010][T19966] direct_splice_actor+0x192/0x6c0 [ 874.036026][T19966] splice_direct_to_actor+0x345/0xa30 [ 874.036041][T19966] ? __pfx_direct_splice_actor+0x10/0x10 [ 874.036058][T19966] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 874.036076][T19966] ? futex_private_hash_put+0x160/0x1b0 [ 874.036094][T19966] do_splice_direct+0x174/0x240 [ 874.036108][T19966] ? __pfx_do_splice_direct+0x10/0x10 [ 874.036123][T19966] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 874.036137][T19966] ? bpf_lsm_file_permission+0x9/0x10 [ 874.036156][T19966] ? security_file_permission+0x71/0x210 [ 874.036173][T19966] ? rw_verify_area+0xcf/0x6c0 [ 874.036198][T19966] do_sendfile+0xb06/0xe50 [ 874.036212][T19966] ? __pfx_do_sendfile+0x10/0x10 [ 874.036226][T19966] ? __x64_sys_futex+0x1e0/0x4c0 [ 874.036244][T19966] ? __x64_sys_futex+0x1e9/0x4c0 [ 874.036265][T19966] __x64_sys_sendfile64+0x1d8/0x220 [ 874.036283][T19966] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 874.036303][T19966] do_syscall_64+0xcd/0xf80 [ 874.036319][T19966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.036334][T19966] RIP: 0033:0x7f1e4db8f7c9 [ 874.036346][T19966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.036361][T19966] RSP: 002b:00007f1e4eacf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 874.036382][T19966] RAX: ffffffffffffffda RBX: 00007f1e4dde5fa0 RCX: 00007f1e4db8f7c9 [ 874.036392][T19966] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 874.036401][T19966] RBP: 00007f1e4dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 874.036410][T19966] R10: 000000007ffff011 R11: 0000000000000246 R12: 0000000000000000 [ 874.036419][T19966] R13: 00007f1e4dde6038 R14: 00007f1e4dde5fa0 R15: 00007ffd1617cf08 [ 874.036433][T19966] [ 874.824177][ T9089] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 874.833296][ T9089] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 874.842337][ T9089] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 874.872632][T19950] RIP: 0010:iput.part.0+0xb3b/0x1190 [ 874.884437][T19950] Code: 4b 68 ff ff 90 0f 0b e8 73 fa 7c ff 90 0f 0b 90 e9 d3 f8 ff ff e8 65 fa 7c ff 48 c7 c6 a0 79 a0 8b 48 89 df e8 26 68 ff ff 90 <0f> 0b e8 4e fa 7c ff 48 c7 c6 00 7a a0 8b 48 89 df e8 0f 68 ff ff [ 874.929195][T19950] RSP: 0018:ffffc900042dfdc8 EFLAGS: 00010296 [ 874.935335][T19950] RAX: 000000000000009f RBX: ffff88805ceea900 RCX: ffffc90011379000 [ 874.944016][T19950] RDX: 0000000000000000 RSI: ffffffff819bf739 RDI: 0000000000000005 [ 874.961788][T19950] RBP: 0000000000000200 R08: 0000000000000005 R09: 0000000000000000 [ 874.970163][T19950] R10: 0000000080000000 R11: 000000000004c9a0 R12: 0000000000000000 [ 874.980096][T19950] R13: ffffffff90878234 R14: ffff88805ceea9d0 R15: dffffc0000000000 [ 874.998774][T19950] FS: 00007f63d35f66c0(0000) GS:ffff888124967000(0000) knlGS:0000000000000000 [ 875.019745][T19950] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 875.038023][T19950] CR2: 00007f8ff21b7198 CR3: 0000000076008000 CR4: 00000000003526f0 [ 875.060632][T19950] Kernel panic - not syncing: Fatal exception [ 875.066774][T19950] Kernel Offset: disabled [ 875.071087][T19950] Rebooting in 86400 seconds..